Every CVE Search/ Get API key

GSD-2022-1000354

libsubcmd: Fix use-after-free for realloc(..., 0)

No score

libsubcmd: Fix use-after-free for realloc(..., 0)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by commit aca7e5b6a5008dcf551516490b0ba4510e073d08, it was introduced in version v4.5 by commit 2f4ce5ec1d447beb42143a9653716a2ab025161e. For more details please see the references link.

What each source reports

OSV No score

libsubcmd: Fix use-after-free for realloc(..., 0)

libsubcmd: Fix use-after-free for realloc(..., 0)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by commit aca7e5b6a5008dcf551516490b0ba4510e073d08, it was introduced in version v4.5 by commit 2f4ce5ec1d447beb42143a9653716a2ab025161e. For more details please see the references link.

Record
GSD-2022-1000354
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
Kernel
Linux
Listed versions, plus commit ranges
v4.10v4.10-rc1v4.10-rc2v4.10-rc3v4.10-rc4
Show 45 moreShow less
v4.10-rc5v4.10-rc6v4.10-rc7v4.10-rc8v4.11v4.11-rc1v4.11-rc2v4.11-rc3v4.11-rc4v4.11-rc5v4.11-rc6v4.11-rc7v4.11-rc8v4.12v4.12-rc1v4.12-rc2v4.12-rc3v4.12-rc4v4.12-rc5v4.12-rc6v4.12-rc7v4.13v4.13-rc1v4.13-rc2v4.13-rc3v4.13-rc4v4.13-rc5v4.13-rc6v4.13-rc7v4.14v4.14-rc1v4.14-rc2v4.14-rc3v4.14-rc4v4.14-rc5v4.14-rc6v4.14-rc7v4.14-rc8v4.15v4.15-rc1v4.15-rc2v4.15-rc3v4.15-rc4v4.15-rc5v4.15-rc6
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GSD-2022-1000354 is a vulnerability with no CVSS score yet in Kernel, published February 27, 2022. No source lists public exploit code. No source names a fixed version.

This page doesn't list everything

Left out here: 314 versions. The JSON record has them.

MoveEnter Open