CVE-2022-1011

HIGH

7.8

CVSS Score

Published: March 18, 2022 at 12:00 AM UTC

Updated: August 26, 2026 at 06:31 PM UTC

39 products affected across 6 vendorsLinux KernelDebian LinuxFedora

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 1%

Description

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0 9.0

Fedora · Fedora Projectrpm

95%

34 35

Linux Kernel · Linux

95%

2.6.35 ≤ v < 4.9.3204.10 ≤ v < 4.14.2764.15 ≤ v < 4.19.2384.20 ≤ v < 5.4.1855.11 ≤ v < 5.15.295.16 ≤ v < 5.16.155.5 ≤ v < 5.10.1065.17 5.17 rc1 5.17 rc2 5.17 rc3 5.17 rc4 5.17 rc5 5.17 rc6 5.17 rc7

Affected range stops below 4.14.276, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.238, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.320, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.106, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.29, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.16.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.185, so it looks safe — our inference, not a vendor statement

H300E Firmware · NetAppdrupal

95%

All versions

netapp-h300e (same device)

H300S Firmware · NetAppdrupal