CVE-2022-0185
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
25.2%
97.8th percentile
CISA KEV
Listed
Added 2024-08-21 · patch by 2024-09-11
Weakness / dates
—
Published — · modified —
Description
Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.