CVE-2022-2585

CVSS v3.1 7.8 (High)

EPSS 0.04 % (5^th)

Affected Products 2

Advisories 19

NVD Status Analyzed

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.

	CPE23	From	Up To
Linux Kernel from 5.7 version and prior 5.10.137 version	cpe:2.3:o:linux:linux_kernel	>= 5.7	< 5.10.137
Linux Kernel from 5.11 version and prior 5.15.61 version	cpe:2.3:o:linux:linux_kernel	>= 5.11	< 5.15.61
Linux Kernel from 5.16 version and prior 5.18.18 version	cpe:2.3:o:linux:linux_kernel	>= 5.16	< 5.18.18
Linux Kernel from 5.19 version and prior 5.19.2 version	cpe:2.3:o:linux:linux_kernel	>= 5.19	< 5.19.2

		CPE23	From	Up To
	Canonical Ubuntu Linux 20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04:::*:lts
	Canonical Ubuntu Linux 22.04	cpe:2.3:o:canonical:ubuntu_linux:22.04:::*:lts