VulnSocial

CVE-2022-0185General(linux / h300e)

LOWCVSS 8.4 · HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux h300e systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

linux CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-09-11. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-190CWE-191

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • h300e
  • h300e_firmware
  • h300s
  • h300s_firmware

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-31); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
linuxnetapp
Products
h300eh300e_firmwareh300sh300s_firmwareh410ch410c_firmwareh410sh410s_firmwareh500eh500e_firmware

1 version affected across 17 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-31: 1Mentions · 2026-04-08: 1Patch / Workaround · 2026-04-08: 1Technical Details · 2026-04-08: 103-3104-08
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-03-311
General1
2026-04-081
Patch1
Full discourse2 posts
  • Mr. OS@ksg93rd
    General

    #Kernel_Security Linux File System Basics Part 1 https://u1f383.github.io/linux/2026/02/26/filesystem-101.html // Overview and CVE-2022-0185 / CVE-2023-5345 Part 2 https://u1f383.github.io/linux/2026/03/04/filesystem-102.html // Isolation, Permission Model and CVE-2023-0386

    Post summary

    A brief post linking to two tutorial pages about Linux filesystem basics that mentions a few CVEs without providing details, proofs, or mitigation information.

    00034254
    3.3K followersView on X
  • it-learn.io@it_learn_io
    Patch

    Escape #3: Kernel Exploit Container shares the host kernel. Old kernel → container escape CVEs: - CVE-2022-0847 (DirtyPipe) - CVE-2022-0185 (heap overflow) - CVE-2020-14386 (AF_PACKET) Prevention: Patch your host kernel. Always.

    Post summary

    The message lists several container escape CVEs and advises patching the host kernel as the primary mitigation.

    1000024
    6 followersView on X
CPE platform detail17 entries

17 of 17 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
HWnetapph300e---
OSnetapph300e_firmware---
HWnetapph300s---
OSnetapph300s_firmware---
HWnetapph410c---
OSnetapph410c_firmware---
HWnetapph410s---
OSnetapph410s_firmware---
HWnetapph500e---
OSnetapph500e_firmware---
HWnetapph500s---
OSnetapph500s_firmware---
HWnetapph700e---
OSnetapph700e_firmware---
HWnetapph700s---
OSnetapph700s_firmware---

Explore more

Back to dashboardlinux CVEsnetapp CVEsh300e vulnerabilities