CVE-2022-2961: Fedoraproject Fedora

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

• Fedoraproject Fedora: version 36 only
• Linux Linux Kernel: before 6.0 (fixed in 6.0); version 6.0 only
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2022-08-29. Last modified 2026-06-17.