What happened
Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.
Affected versions
Kernel: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
PoC-in-GitHub · Crusaders-of-Rust/CVE-2022-0185CVE-2022-0185★ 378Crusaders-of-Rust2022-01-19CandidatePoC-in-GitHub · discordianfish/cve-2022-0185-crash-poc★ 5discordianfish2022-01-26CandidatePoC-in-GitHub · khaclep007/CVE-2022-0185★ 0khaclep0072022-01-27CandidatePoC-in-GitHub · chenaotian/CVE-2022-0185CVE-2022-0185 POC and Docker and Analysis write up★ 37chenaotian2022-02-18CandidatePoC-in-GitHub · veritas501/CVE-2022-0185-PipeVersionCVE-2022-0185 exploit rewritten with pipe primitive★ 16veritas5012022-04-05CandidatePoC-in-GitHub · featherL/CVE-2022-0185-exploitCVE-2022-0185 exploit★ 3featherL2022-04-14CandidatePoC-in-GitHub · dcheng69/CVE-2022-0185-Case-Study★ 3dcheng692024-04-15CandidatePoC-in-GitHub · sandesh9978/CVE-2022-0185-Analysis-and-ExploitResearch and proof-of-concept for CVE-2022-0185 Linux kernel heap overflow vulnerability.★ 0sandesh99782026-02-25CandidatePoC-in-GitHub · prabeershakya/CVE-2022-0185-POC★ 0prabeershakya2026-03-04CandidatePoC-in-GitHub · shakyanayann/CVE-2022-0185★ 0shakyanayann2026-03-05CandidatePoC-in-GitHub · secjuhl/CVE-2022-0185This is a PoC exploit I created for CVE-2022-0185 as practice. It is not a very stable exploit and it was created for kernel 5.15.★ 0secjuhl2026-10-07CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.