CVE-2022-1304

medium
Published 2022-11-15 · Modified 2022-11-17
CVSS v3
CVSS v2
VIR risk
5.5

Description

Moderate: e2fsprogs security update

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-8361.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7720.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2069726

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7720

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:8361

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-1304.html

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7720

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-1304

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:8361

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
debian debianbookwormfixed1.46.6~rc1-1
debian debianbullseyefixed1.46.2-2+deb11u1
debian debianforkyfixed1.46.6~rc1-1
debian debiansidfixed1.46.6~rc1-1
debian debiantrixiefixed1.46.6~rc1-1
rockylinux rocky8fixed
suse slesaffected
rockylinux rocky9fixed

References

Verify integrity in audit chain (admin only). AS-IS.