Endpoint and server security
CVE-2022-0615: Use-after-free vulnerability in ESET products for Linux
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 5.9
EPSS0.83%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Endpoint Antivirus for Linux 7.1.6.0 to 7.1.9.0 | Upgrade past 7.1.9.0; see the advisory |
| Endpoint Antivirus for Linux 8.0.3.0 to 8.1.5.0 | Upgrade past 8.1.5.0; see the advisory |
| ESET Server Security for Linux 7.2.463.0 to 7.2.574.0 | Upgrade past 7.2.574.0; see the advisory |
| ESET Server Security for Linux 8.0.375.0 to 8.1.813.0 | Upgrade past 8.1.813.0; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.