Homepage

Use of Uninitialized Resource The advisory has been revoked - it doesn't affect any version of package kernel-cross-headers  (opens in a new tab)

Threat Intelligence

EPSS
0.01% (2nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS8-KERNELCROSSHEADERS-2395941
  • published8 Feb 2022
  • disclosed4 Feb 2022
Report a new vulnerability Found a mistake?

Introduced: 4 Feb 2022

CVE-2022-24448  (opens in a new tab)
CWE-908  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-cross-headers package and not the kernel-cross-headers package as distributed by Centos.

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.

References