GSD-2022-1002138

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

No score

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit 7bb7428dd73991bf4b3a7a61b493ca50046c2b13, it was introduced in version v2.6.18 by commit aa98d7cf59b5b0764d3502662053489585faf2fe. For more details please see the references link.

What each source reports

OSV No score

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

Record: GSD-2022-1002138
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`Kernel` Linux	Listed versions, plus commit ranges v2.6.17v2.6.17-rc4v2.6.17-rc5v2.6.17-rc6v2.6.18 Show 45 moreShow less v2.6.18-rc1v2.6.18-rc2v2.6.18-rc3v2.6.18-rc4v2.6.18-rc5v2.6.18-rc6v2.6.18-rc7v2.6.19v2.6.19-rc1v2.6.19-rc2v2.6.19-rc3v2.6.19-rc4v2.6.19-rc5v2.6.19-rc6v2.6.20v2.6.20-rc1v2.6.20-rc2v2.6.20-rc3v2.6.20-rc4v2.6.20-rc5v2.6.20-rc6v2.6.20-rc7v2.6.21v2.6.21-rc1v2.6.21-rc2v2.6.21-rc3v2.6.21-rc4v2.6.21-rc5v2.6.21-rc6v2.6.21-rc7v2.6.22v2.6.22-rc1v2.6.22-rc2v2.6.22-rc3v2.6.22-rc4v2.6.22-rc5v2.6.22-rc6v2.6.22-rc7v2.6.23v2.6.23-rc1v2.6.23-rc2v2.6.23-rc3v2.6.23-rc4v2.6.23-rc5v2.6.23-rc6	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GSD-2022-1002138 is a vulnerability with no CVSS score yet in Kernel, published April 24, 2022. No source lists public exploit code. No source names a fixed version.

This page doesn't list everything

Left out here: 697 versions. The JSON record has them.