There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2318.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "27598290246638638555961300179788602673",
"length": 224.0
},
"id": "CVE-2022-2318-0df98f03",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_start_t1timer"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "75980529023026732869637169361132637941",
"length": 224.0
},
"id": "CVE-2022-2318-3ac81a7a",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_start_hbtimer"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"line_hashes": [
"275540560450585683046905995694932070390",
"135473126596461569252618462296016847256",
"212536842774370707337086848276217251781",
"205839966358968017636906205460986590681",
"74934351456848810681331371500313221658",
"247383895783757202834071138977218954257",
"213270228821763152278804370513139753886",
"208702628607141488990500305474681183132",
"70000657537057486837050952579740970484",
"323858043924487300068630802362162757292",
"121084083426827528712201617271495623464",
"121267357784011603622738709621247642931",
"22998442309671910092070369587585248877",
"248224872116660584336599912071030307854",
"273124206045800218130311040215088247135",
"55941588739914347165446152663357088878",
"304505981341888722526880755054229822285",
"323858043924487300068630802362162757292",
"329380811290263491118759488610542607962",
"116208205972955248655071018137819594017",
"281784734223805852439704135835501385819",
"180658026040654612932625722801619851768",
"276543000777930521819347706328461998715",
"306479188133962817625091539089655343810",
"24377225857402545702736059132453720558",
"323858043924487300068630802362162757292",
"69292790614361159269885183542381989364",
"191324336762234991139624814218417737832",
"226373571066995480729262842812369134399",
"52545566255796753949227017508418414366",
"12066452272895158284364486529744837337",
"153511691432184031949820572458935902989",
"123313190413083512065991549281673136449",
"323858043924487300068630802362162757292",
"224526240011031069599450106744377103861",
"71042715045815804461820751725408021680",
"232030382883886886254457657620717977624",
"20835102108258291915031040967271613290",
"301226973563036914820644861671679782404",
"308457047587739726305166458537338225326",
"230087426905713527114855961567343826638",
"168116138970525517015938167715691087474",
"153620839324580631175985096789210842230",
"283525179350781148746006719349144998624",
"24670156083781303910254036149089122406",
"33083520699154618175463120679306995078",
"24713218620095640278143765174162188501",
"30211443136020994067819842743820708741",
"67039455693722239657132187295720196242",
"212864651366002788945493248930298723670",
"66805715922649323012934258962061866809",
"196554596546286316318444251694332582318",
"125631482422585073260832778858789248827",
"280657021020242516901210552633500792645",
"95793109219247612124514862148049729181",
"203318652541095748726539140781168639253",
"213060356669714373983361698801870481837",
"220354220279849743271809164651583649939",
"301958388777035292815327708547558146749",
"98891569892360577048035482707912654090",
"225809185245917566064839533994360299852",
"204200211075770157089976018959151047520",
"338264446975869755052151259570592345259",
"339073317271585425318565497732527312080",
"308627476588369004736258110076408909266",
"23982873723025580634780890590851268879",
"223330287703745538361970213341005051855",
"68452085208293165046748057736206914311",
"268238031416175232537286882730417037958",
"168084882084670397626504724139867969987",
"336575369690239178394944518702191696760",
"114540805355221470964266898457291636119",
"244750643351602373400711047234666849176",
"253648286526363899304527754781850135781",
"308871760045663692808247586585352124061"
],
"threshold": 0.9
},
"id": "CVE-2022-2318-450249fd",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "112668854486363097454436734446122030255",
"length": 224.0
},
"id": "CVE-2022-2318-4518945f",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_start_t2timer"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "305791432226076359199422281700095942703",
"length": 81.0
},
"id": "CVE-2022-2318-8351f98a",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_stop_timer"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "328619613035074989550659262484443789020",
"length": 224.0
},
"id": "CVE-2022-2318-846452da",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_start_t3timer"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "300647521280690657016442996206984893500",
"length": 71.0
},
"id": "CVE-2022-2318-8639509e",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_stop_heartbeat"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "159465932449748169162226812173327529205",
"length": 210.0
},
"id": "CVE-2022-2318-8b4b723b",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_start_heartbeat"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "324016549883391199915574543623002820942",
"length": 479.0
},
"id": "CVE-2022-2318-8f5e6181",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_idletimer_expiry"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "74103203597236085978944886925779594935",
"length": 85.0
},
"id": "CVE-2022-2318-9f584ddf",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_stop_idletimer"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "134991566696068536462496101974431130379",
"length": 720.0
},
"id": "CVE-2022-2318-a1213753",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_heartbeat_expiry"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "6297747281933655006747791052558236753",
"length": 273.0
},
"id": "CVE-2022-2318-a8d6d249",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_start_idletimer"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6",
"digest": {
"function_hash": "312528909630763565687385287805794622447",
"length": 569.0
},
"id": "CVE-2022-2318-e4035d60",
"deprecated": false,
"target": {
"file": "net/rose/rose_timer.c",
"function": "rose_timer_expiry"
}
}
]