CVE-2022-1011: Debian Linux

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

Affected products

  • Debian Debian Linux: version 9.0 only; version 10.0 only
  • Fedoraproject Fedora: version 34 only; version 35 only
  • Linux Linux Kernel: from 2.6.35, before 4.9.320 (fixed in 4.9.320); from 4.10, before 4.14.276 (fixed in 4.14.276); from 4.15, before 4.19.238 (fixed in 4.19.238); from 4.20, before 5.4.185 (fixed in 5.4.185); from 5.5, before 5.10.106 (fixed in 5.10.106); from 5.11, before 5.15.29 (fixed in 5.15.29); …
  • Netapp h300e Firmware: affected versions not specified
  • Netapp h300s Firmware: affected versions not specified
  • Netapp h410c Firmware: affected versions not specified
  • Netapp h410s Firmware: affected versions not specified
  • Netapp h500e Firmware: affected versions not specified
  • Netapp h500s Firmware: affected versions not specified
  • Netapp h700e Firmware: affected versions not specified
  • Netapp h700s Firmware: affected versions not specified
  • Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
  • Red Hat Build Of Quarkus: version 2.0 only
  • Red Hat Codeready Linux Builder: affected versions not specified
  • Red Hat Developer Tools: version 1.0 only
  • Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only
  • Red Hat Enterprise Linux Eus: version 8.6 only
  • Red Hat Enterprise Linux For IBM Z Systems: version 8.0 only
  • Red Hat Enterprise Linux For IBM Z Systems Eus: version 8.6 only
  • Red Hat Enterprise Linux For Power Little Endian: version 8.0 only
  • Red Hat Enterprise Linux For Power Little Endian Eus: version 8.6 only
  • Red Hat Enterprise Linux For Real Time: version 8 only
  • Red Hat Enterprise Linux For Real Time For Nfv: version 8 only
  • Red Hat Enterprise Linux For Real Time For Nfv Tus: version 8.6 only
  • Red Hat Enterprise Linux For Real Time Tus: version 8.6 only
  • and 5 more

Published 2022-03-18. Last modified 2026-08-26.