{"cve_id":"CVE-2022-0185","published":"2022-02-11T18:15:10.890000+00:00","last_modified":"2026-06-17T04:20:06.923000+00:00","vuln_status":"Analyzed","description":"A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","base_score":8.4,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-190","CWE-191"],"in_kev":true,"kev_date_added":"2024-08-21","kev_ransomware":false,"epss_score":0.25151,"epss_percentile":0.97933,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"NONE","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T09:58:03.213868+00:00","first_seen":"2022-02-11T18:15:10.890000+00:00","kev_first_seen":"2024-08-21T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["linux","netapp"],"products":["h300e","h300e_firmware","h300s","h300s_firmware","h410c","h410c_firmware","h410s","h410s_firmware","h500e","h500e_firmware","h500s","h500s_firmware","h700e","h700e_firmware","h700s","h700s_firmware","linux_kernel"],"affected":[{"vendor":"linux","product":"linux_kernel","ranges":["≥ 5.1 and < 5.4.173","≥ 5.5 and < 5.10.93","≥ 5.11 and < 5.15.16","≥ 5.16 and < 5.16.2"]},{"vendor":"netapp","product":"h300e_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h300s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500e_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700e_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700s_firmware","ranges":["all versions"]}]}