CVE-2022-0185

CVE Enrichment

CVSS: 8.4 HIGH
EPSS: 25.15%
EPSS Percentile: 97.92%
CISA KEV: YES — Known Exploited Vulnerability

Description

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: secalert@redhat.com
Published: 12-Feb-2022 01:15
Last Modified: 17-Jun-2026 11:20
EPSS Date: 2026-10-18
CWE: CWE-190, CWE-191

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CISA KEV Details

Date Added: 2024-08-21
Remediation Due: 2024-09-11
Known Ransomware Campaign Use: Unknown
Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=722d94847de2; https://nvd.nist.gov/vuln/detail/CVE-2022-0185

Affected Products / Versions

linux / linux_kernel
Version / affected range: * · from (inclusive) 5.1 · before (exclusive) 5.4.173
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 5.5 · before (exclusive) 5.10.93
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 5.11 · before (exclusive) 5.15.16
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 5.16 · before (exclusive) 5.16.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
netapp / h410c_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
netapp / h300s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
netapp / h500s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
netapp / h700s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
netapp / h300e_firmware
Version / affected range: -
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
netapp / h500e_firmware
Version / affected range: -
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
netapp / h700e_firmware
Version / affected range: -
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
netapp / h410s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

References

Last enrichment sync: 19-Oct-2026 18:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Consider CVE-2022-0185. Exploiting this vulnerability requires a localized CAP_SYS_ADMIN granted automatically by userns, reflecting how a security feature can actually generate an insecurity at the kernel level. How Kubernetes User Namespaces Can Reduce Container Escape Risks—and Their Limitations

Products (4)

Tools (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.