ZeroDay Findings
Sign inSign up

Findings

CVE-2022-0185

Linux Kernel Heap-Based Buffer Overflow Vulnerability

Published Feb 11, 2022 · updated Jun 16, 2026 · linux linux kernel

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 11, 2022 · Catalog

    Detected

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thu

  2. Aug 21, 2024 · CISA KEV

    Known exploited

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  3. Sep 11, 2024 · CISA KEV

    Remediation due

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thu

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Sep 11, 2024

Affected

  • cpe linux/linux kernelversion unspecified
  • cpe netapp/h300e firmwareversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500e firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700e firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2022-0185

    Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.

    cisa.gov
  • CVE.orgCVE-2022-0185

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-0185

    30-day exploitation probability 25.2%

    first.org
  • NIST NVDCVE-2022-0185

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced

    nvd.nist.gov

References