CVE-2022-1998: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Affected products

• Fedoraproject Fedora: version 35 only
• Linux Linux Kernel: from 5.10.46, before 5.10.97 (fixed in 5.10.97); from 5.12.12, before 5.15.20 (fixed in 5.15.20); from 5.16.0, before 5.16.6 (fixed in 5.16.6)
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Red Hat Enterprise Linux: version 9.0 only

Published 2022-06-09. Last modified 2026-06-17.