CVE-2022-1184
use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block in the Linux kernel’s filesystem sub-component
CVE-2022-1184: use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block in the Linux kernel’s filesystem sub-component. Not in the CISA KEV catalog.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
CVE-2022-1184 at a glance
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- Medium
- CVSS base score
- 5.5 (Red Hat)
- CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H(Red Hat)
- Weakness
- CWE-416
- Fixed releases
- Red Hat: kernel-rt-0:4.18.0-425.3.1.rt7.213.el8, kernel-0:4.18.0-425.3.1.el8, kernel-0:4.18.0-372.100.1.el8_6, kernel-0:5.14.0-162.6.1.el9_1, kernel-rt-0:5.14.0-162.6.1.rt21.168.el9_1, RHSA-2022:7444 and 4 more in the advisory
- Vendor advisories
- 1 from Red Hat
- VulniPulse record
- Published
Scores, vectors, weaknesses and fixed releases are quoted from vendor advisories that cover only CVE-2022-1184; bulletin-wide values are not repeated here.
Is CVE-2022-1184 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2022-1184 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2022-1184?
Upgrade to a fixed release named by the vendor:
- Red Hat: kernel-rt-0:4.18.0-425.3.1.rt7.213.el8, kernel-0:4.18.0-425.3.1.el8, kernel-0:4.18.0-372.100.1.el8_6, kernel-0:5.14.0-162.6.1.el9_1, kernel-rt-0:5.14.0-162.6.1.rt21.168.el9_1, RHSA-2022:7444
- Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. (Red Hat)
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium5.5
Medium [CVE-2022-1184] use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block in the Linux kernel’s filesystem sub-component
CVE-2022-1184Source published Source updated
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-416. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat fixing advisory: RHSA-2022:7444, RHSA-2022:7683, RHSA-2024:1877, RHSA-2022:8267, RHSA-2022:7933. Affected products named by the advisory: Red Hat package: kernel-rt.
- Affected products in this advisory
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Red Hat Enterprise Linux 9
- Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
- Red Hat package: kernel-rt
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- kernel-rt-0:4.18.0-425.3.1.rt7.213.el8
- kernel-0:4.18.0-425.3.1.el8
- kernel-0:4.18.0-372.100.1.el8_6
- kernel-0:5.14.0-162.6.1.el9_1
6 more entries in the full advisory.
- Mitigation guidance
- Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.