CVE-2022-2526

CRITICAL
Published Sep 9, 20223y ago · Modified Jun 17, 20262w ago
9.8 CVSS 3.1
Critical
Find Similar
Published Sep 9, 2022 3y ago
Last Modified Jun 17, 2026 2w ago

Description

A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.

CVSS Details

Base Score
9.8
Exploitability
3.9
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 10

VendorProductVersionRange
systemd_projectsystemd240any
netappactive_iq_unified_manager*any
netapph300s_firmware*any
netapph300s*any
netapph500s_firmware*any
netapph500s*any
netapph700s_firmware*any
netapph700s*any
netapph410s_firmware*any
netapph410s*any

References 2

  • github.com https://github.com/systemd/systemd/commit/d973d94dec349fb676fdd844f6fe2ada3538f27c
    PatchThird Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20221111-0005/
    Third Party Advisory

Remediation

  • github.com https://github.com/systemd/systemd/commit/d973d94dec349fb676fdd844f6fe2ada3538f27c
    PatchThird Party Advisory