Bug 2073893 (CVE-2022-22624)

Summary: CVE-2022-22624 webkitgtk: Use-after-free leading to arbitrary code execution
Product: [Other] Security Response Reporter: Avinash Hanwate <ahanwate>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: alekcejk, decathorpe, erack, erik-fedora, extras-orphan, gnome-sig, gwync, ivazqueznet, jgrulich, jreznik, kde-sig, kevin, manisandro, mcatanza, me, mikedep333, mtasaka, notting, patrick, perl-devel, rdieter, rjones, rust-sig, than, tpopela, walters, zebob.m
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: WebKitGTK 2.36.0 Doc Type: If docs needed, set a value
Doc Text:
A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution.
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-12-06 02:33:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 2073895, 2075492, 2075493    
Bug Blocks: 2073891    

Description Avinash Hanwate 2022-04-11 04:48:44 UTC
A use after free issue was addressed with improved memory management.

Comment 1 Avinash Hanwate 2022-04-11 05:02:06 UTC
Created webkit2gtk3 tracking bugs for this issue:

Affects: fedora-all [bug 2073895]

Comment 3 errata-xmlrpc 2022-11-08 10:13:47 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:7704 https://access.redhat.com/errata/RHSA-2022:7704

Comment 4 errata-xmlrpc 2022-11-15 10:05:18 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2022:8054 https://access.redhat.com/errata/RHSA-2022:8054

Comment 5 Fabio Valentini 2022-11-18 15:59:54 UTC
Why has the Rust SIG been added to CC on this bug? We maintain no projects that contain WebKit code.

Comment 6 Product Security DevOps Team 2022-12-06 02:33:24 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):