CVE-2022-28796: Fedoraproject Fedora

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.

Affected products

• Fedoraproject Fedora: version 35 only
• Linux Linux Kernel: from 5.17, before 5.17.1 (fixed in 5.17.1)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Compute Node Firmware: affected versions not specified
• Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only

Published 2022-04-08. Last modified 2026-06-17.