CVE-2022-2526
Fixed in a distro release EPSS 1%
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
Products: systemd_project systemd, netapp active_iq_unified_manager, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h410s_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | systemd | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-container | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-devel | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-journal-remote | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-libs | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-pam | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-tests | 239-58.el8_6.4 |
| AlmaLinux 8 | systemd-udev | 239-58.el8_6.4 |
| Amazon Linux 2 | libgudev1 | 219-78.amzn2.0.20 |
| Amazon Linux 2 | libgudev1-devel | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-devel | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-journal-gateway | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-libs | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-networkd | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-python | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-resolved | 219-78.amzn2.0.20 |
| Amazon Linux 2 | systemd-sysv | 219-78.amzn2.0.20 |
| Debian 12 | systemd | 240-1 |
| Debian 13 | systemd | 240-1 |
| Debian 14 | systemd | 240-1 |
| Red Hat Enterprise Linux 7 | libgudev1 | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | libgudev1-devel | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-debuginfo | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-devel | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-journal-gateway | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-libs | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-networkd | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-python | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-resolved | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 7 | systemd-sysv | 0:219-78.el7_9.7 |
| Red Hat Enterprise Linux 8 | systemd | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-container | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-container-debuginfo | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-debuginfo | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-debugsource | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-devel | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-journal-remote | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-journal-remote-debuginfo | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-libs | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-libs-debuginfo | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-pam | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-pam-debuginfo | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-tests | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-tests-debuginfo | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-udev | 0:239-58.el8_6.4 |
| Red Hat Enterprise Linux 8 | systemd-udev-debuginfo | 0:239-58.el8_6.4 |
| Red Hat rhel e4s 8.1 | systemd | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-container | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-container-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-debugsource | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-devel | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-journal-remote | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-journal-remote-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-libs | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-libs-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-pam | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-pam-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-tests | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-tests-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-udev | 0:239-18.el8_1.11 |
| Red Hat rhel e4s 8.1 | systemd-udev-debuginfo | 0:239-18.el8_1.11 |
| Red Hat rhel eus 8.2 | systemd | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-container | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-container-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-debugsource | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-devel | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-journal-remote | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-journal-remote-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-libs | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-libs-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-pam | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-pam-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-tests | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-tests-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-udev | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.2 | systemd-udev-debuginfo | 0:239-31.el8_2.9 |
| Red Hat rhel eus 8.4 | systemd | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-container | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-container-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-debugsource | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-devel | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-journal-remote | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-journal-remote-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-libs | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-libs-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-pam | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-pam-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-tests | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-tests-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-udev | 0:239-45.el8_4.12 |
| Red Hat rhel eus 8.4 | systemd-udev-debuginfo | 0:239-45.el8_4.12 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.5.2-202209140405_8.6 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.5.2-202209140405_8.6 |
| Rocky Linux 8 | systemd | 0:239-58.el8_6.4 |
| Ubuntu 18.04 LTS | systemd | 237-3ubuntu10.54 |
| Ubuntu 18.04 LTS | systemd | 237-3ubuntu10.56 |