Description (CNA)
A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Kernel | affected Linux kernel 6.0-rc2 |
CWE
CWE-416
References
- https://access.redhat.com/security/cve/CVE-2022-2961
- https://security.netapp.com/advisory/ntap-20230214-0004/
ADP enrichment
No English description supplied.