CVE-2022-3202: Linux Kernel

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

Affected products

• Linux Linux Kernel: before 4.9.311 (fixed in 4.9.311); from 4.10, before 4.14.276 (fixed in 4.14.276); from 4.15, before 4.19.238 (fixed in 4.19.238); from 4.20, before 5.4.189 (fixed in 5.4.189); from 5.5.0, before 5.10.111 (fixed in 5.10.111); from 5.11, before 5.15.34 (fixed in 5.15.34); …
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2022-09-14. Last modified 2026-06-17.