CVE-2022-1011High· 7.8▾ MidnightPoC availableA use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Aug 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.2%
1 GitHub repo
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
linux_kernel >= 2.6.35, < 4.9.320linux_kernel >= 4.10, < 4.14.276linux_kernel >= 4.15, < 4.19.238linux_kernel >= 4.20, < 5.4.185linux_kernel >= 5.5, < 5.10.106linux_kernel >= 5.11, < 5.15.29linux_kernel >= 5.16, < 5.16.15linux_kernel = 5.17fedora = 34fedora = 35build_of_quarkus = 2.0developer_tools = 1.0enterprise_linux = 6.0enterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux_eus = 8.6enterprise_linux_for_ibm_z_systems = 8.0enterprise_linux_for_ibm_z_systems_eus = 8.6enterprise_linux_for_power_little_endian = 8.0enterprise_linux_for_power_little_endian_eus = 8.6enterprise_linux_for_real_time = 8enterprise_linux_for_real_time_for_nfv = 8enterprise_linux_for_real_time_for_nfv_tus = 8.6enterprise_linux_for_real_time_tus = 8.6enterprise_linux_server_aus = 8.6enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 8.6enterprise_linux_server_tus = 8.6enterprise_linux_server_update_services_for_sap_solutions = 8.6virtualization_host = 4.0codeready_linux_builderh300s_firmwareh500s_firmwareh700s_firmwareh300e_firmwareh500e_firmwareh700e_firmwareh410s_firmwareh410c_firmwaredebian_linux = 9.0debian_linux = 10.0communications_cloud_native_core_binding_support_function = 22.1.3Upgrade past the affected range:
linux_kernel 5.16.15Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-37159Medium· 6.4hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
CVE-2022-1734High· 7.0A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.
CVE-2022-32250High· 7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
CVE-2026-19548Medium· 5.5Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils
CVE-2026-71226High· 7.3Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.
CVE-2022-3256High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.0530.