{ "schema_version": "1.4.0", "id": "GHSA-mhfc-6hhr-w9gw", "modified": "2022-08-31T00:00:20Z", "published": "2022-08-25T00:00:27Z", "aliases": [ "CVE-2022-2978" ], "details": "A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2978" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html" }, { "type": "WEB", "url": "https://lore.kernel.org/linux-fsdevel/20220816040859.659129-1-dzm91@hust.edu.cn/T/#u" } ], "database_specific": { "cwe_ids": [ "CWE-416" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-08-24T16:15:00Z" } }