CVE-2022-0185
KEVHIGH 8.4EPSS 25.2%
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
- Affected
- kernel
- CVSS v3.1 NVD
- 8.4 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 25.15% chance of exploitation in the next 30 days, 98th percentile
- CISA KEV
- added 2024-08-21
- Published
- 2022-02-11
- Updated
- 2025-10-21
Proof-of-concept exploits (12)
- https://www.willsroot.io/2022/01/cve-2022-0185.html
- Crusaders-of-Rust/CVE-2022-0185378★ · 2022-04-25
- chenaotian/CVE-2022-018537★ · 2022-05-24
- dcheng69/CVE-2022-0185-Case-Study3★ · 2024-05-09
- discordianfish/cve-2022-0185-crash-poc5★ · 2022-01-26
- featherL/CVE-2022-0185-exploit3★ · 2022-11-02
- khaclep007/CVE-2022-01850★ · 2022-01-27
- veritas501/CVE-2022-0185-PipeVersion16★ · 2022-04-05
- prabeershakya/CVE-2022-0185-POC0★ · 2026-03-04
- sandesh9978/CVE-2022-0185-Analysis-and-Exploit0★ · 2026-03-20
- shakyanayann/CVE-2022-01850★ · 2026-03-05
- secjuhl/CVE-2022-01850★ · 2026-10-07
Security advisories
- https://security.netapp.com/advisory/ntap-20220225-0003
- https://www.openwall.com/lists/oss-security/2022/01/18/7
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2