CVE-2022-3238: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

• Linux Linux Kernel: version 6.1 only

Published 2022-11-14. Last modified 2026-06-17.