GSD-2022-1002374

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

No score

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit c3b07c875fa8f906f932976460fd14798596f101, it was introduced in version v2.6.18 by commit aa98d7cf59b5b0764d3502662053489585faf2fe. For more details please see the references link.

What each source reports

OSV No score

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

Record: GSD-2022-1002374
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`Kernel` Linux	Listed versions, plus commit ranges v2.6.17v2.6.17-rc4v2.6.17-rc5v2.6.17-rc6v2.6.18 Show 45 moreShow less v2.6.18-rc1v2.6.18-rc2v2.6.18-rc3v2.6.18-rc4v2.6.18-rc5v2.6.18-rc6v2.6.18-rc7v2.6.19v2.6.19-rc1v2.6.19-rc2v2.6.19-rc3v2.6.19-rc4v2.6.19-rc5v2.6.19-rc6v2.6.20v2.6.20-rc1v2.6.20-rc2v2.6.20-rc3v2.6.20-rc4v2.6.20-rc5v2.6.20-rc6v2.6.20-rc7v2.6.21v2.6.21-rc1v2.6.21-rc2v2.6.21-rc3v2.6.21-rc4v2.6.21-rc5v2.6.21-rc6v2.6.21-rc7v2.6.22v2.6.22-rc1v2.6.22-rc2v2.6.22-rc3v2.6.22-rc4v2.6.22-rc5v2.6.22-rc6v2.6.22-rc7v2.6.23v2.6.23-rc1v2.6.23-rc2v2.6.23-rc3v2.6.23-rc4v2.6.23-rc5v2.6.23-rc6	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GSD-2022-1002374 is a vulnerability with no CVSS score yet in Kernel, published April 24, 2022. No source lists public exploit code. No source names a fixed version.

This page doesn't list everything

Left out here: 725 versions. The JSON record has them.