Description
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a kernel
Linux kernel 5.16-rc8affected
References
- https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=for-next ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2064855 ↗
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html ↗
- https://www.debian.org/security/2022/dsa-5173 ↗
- https://www.oracle.com/security-alerts/cpujul2022.html ↗