---
id: CVE-2022-2978
title: >-
  A flaw use after free in the Linux kernel NILFS file system was found in the
  way user triggers function security_inode_alloc to fail with following call to
  function nilfs_mdt_destroy
summary: >-
  A flaw use after free in the Linux kernel NILFS file system was found in the
  way user triggers function security_inode_alloc to fail with following call to
  function nilfs_mdt_destroy. A local user could use this flaw to crash the
  system …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-416
  - CWE-416
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 2.6.12, < 4.9.331'
  - 'linux_kernel >= 4.10, < 4.14.296'
  - 'linux_kernel >= 4.15, < 4.19.262'
  - 'linux_kernel >= 4.20, < 5.4.218'
  - 'linux_kernel >= 5.5, < 5.10.148'
  - 'linux_kernel >= 5.11, < 5.15.73'
  - 'linux_kernel >= 5.16, < 5.19.15'
  - 'linux_kernel >= 6.0, < 6.0.1'
  - debian_linux = 10.0
patched:
  - linux_kernel 6.0.1
published: '2022-08-24'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T14:17:22.440'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-2978'
references:
  - url: 'https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html'
    label: secalert@redhat.com
  - url: >-
      https://lore.kernel.org/linux-fsdevel/20220816040859.659129-1-dzm91%40hust.edu.cn/T/#u
    label: secalert@redhat.com
  - url: 'https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lore.kernel.org/linux-fsdevel/20220816040859.659129-1-dzm91%40hust.edu.cn/T/#u
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.00243
epssPercentile: 0.14387
ingestedAt: '2026-10-14T15:36:13.916Z'
---

## Overview

A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

## Affected

- `linux_kernel >= 2.6.12, < 4.9.331`
- `linux_kernel >= 4.10, < 4.14.296`
- `linux_kernel >= 4.15, < 4.19.262`
- `linux_kernel >= 4.20, < 5.4.218`
- `linux_kernel >= 5.5, < 5.10.148`
- `linux_kernel >= 5.11, < 5.15.73`
- `linux_kernel >= 5.16, < 5.19.15`
- `linux_kernel >= 6.0, < 6.0.1`
- `debian_linux = 10.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.0.1`