CVE-2022-2961

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free flaw in the Linux kernel's PLP Rose functionality. This flaw occurs when a user triggers a race condition by calling bind while simultaneously triggering the rose bind() function, allowing a local user to crash or potentially escalate their privileges on the system. The flaw is associated with the reuse of previously freed memory due to concurrent access to a resource, resulting in a potential impact on the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.