CVE-2022-28796

Updated: 2025-08-20 01:49:21.386813

Description:

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 6.9
CVSS Version 3.x HIGH 7.0

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

CentOS 6 ELS kernel 2.6.32 7.0 HIGH Not Vulnerable 2022-04-15 03:56:43
CentOS 7 ELS kernel 3.10.0 7.0 HIGH Not Vulnerable 2025-09-12 13:13:29
CentOS 8.4 ELS kernel 4.18.0 7.0 HIGH Not Vulnerable 2022-04-27 06:57:04
CentOS 8.5 ELS kernel 4.18.0 7.0 HIGH Not Vulnerable 2022-04-27 06:57:04
CloudLinux 6 ELS kernel 2.6.32 7.0 HIGH Not Vulnerable 2022-04-15 03:56:43
Oracle Linux 6 ELS kernel 2.6.32 7.0 HIGH Not Vulnerable 2022-04-15 03:56:43
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.0 HIGH Not Vulnerable 2022-10-05 03:15:01
Ubuntu 16.04 ELS linux 4.4.0 7.0 HIGH Not Vulnerable 2022-04-15 07:03:52
Ubuntu 18.04 ELS linux 4.15.0 7.0 HIGH Not Vulnerable 2023-08-28 21:18:51