CVE-2022-0330

EPSS 0.05%
Veröffentlicht 25.03.2022 19:15:10
Zuletzt bearbeitet 21.11.2024 06:38:23
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 5.17

Linux ≫ Linux Kernel Version5.17 Update-

Linux ≫ Linux Kernel Version5.17 Updaterc1

Redhat ≫ Codeready Linux Builder Version8.0

Redhat ≫ Codeready Linux Builder Version8.4

Redhat ≫ Codeready Linux Builder Eus Version8.2

Redhat ≫ Codeready Linux Builder Eus For Power Little Endian Version8.2

Redhat ≫ Codeready Linux Builder For Power Little Endian Eus Version8.0

Redhat ≫ Codeready Linux Builder For Power Little Endian Eus Version8.4

Redhat ≫ Enterprise Linux Server Update Services For Sap Solutions Version7.7

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Desktop Version7.0

Redhat ≫ Enterprise Linux Eus Version8.2

Redhat ≫ Enterprise Linux Eus Version8.4

Redhat ≫ Enterprise Linux For Ibm Z Systems Version8.0

Redhat ≫ Enterprise Linux For Ibm Z Systems Eus Version8.2

Redhat ≫ Enterprise Linux For Ibm Z Systems Eus Version8.4

Redhat ≫ Enterprise Linux For Power Big Endian Version7.0

Redhat ≫ Enterprise Linux For Power Little Endian Version7.0

Redhat ≫ Enterprise Linux For Power Little Endian Version8.0

Redhat ≫ Enterprise Linux For Power Little Endian Eus Version8.2

Redhat ≫ Enterprise Linux For Power Little Endian Eus Version8.4

Redhat ≫ Enterprise Linux For Real Time Version7

Redhat ≫ Enterprise Linux For Real Time Version8

Redhat ≫ Enterprise Linux For Real Time For Nfv Version7

Redhat ≫ Enterprise Linux For Real Time For Nfv Version8

Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version8.2

Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version8.4

Redhat ≫ Enterprise Linux For Real Time Tus Version8.2

Redhat ≫ Enterprise Linux For Real Time Tus Version8.4

Redhat ≫ Enterprise Linux For Scientific Computing Version7.0

Redhat ≫ Enterprise Linux Server Version7.0

Redhat ≫ Enterprise Linux Server Aus Version7.3

Redhat ≫ Enterprise Linux Server Aus Version7.4

Redhat ≫ Enterprise Linux Server Aus Version7.6

Redhat ≫ Enterprise Linux Server Aus Version7.7

Redhat ≫ Enterprise Linux Server Aus Version8.2

Redhat ≫ Enterprise Linux Server Aus Version8.4

Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version7.6

Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version7.7

Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version8.1

Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version8.2

Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version8.4

Redhat ≫ Enterprise Linux Server Tus Version7.7

Redhat ≫ Enterprise Linux Server Tus Version8.2

Redhat ≫ Enterprise Linux Server Tus Version8.4

Redhat ≫ Enterprise Linux Server Update Services For Sap Solutions Version7.6

Redhat ≫ Enterprise Linux Server Update Services For Sap Solutions Version8.1

Redhat ≫ Enterprise Linux Server Update Services For Sap Solutions Version8.2

Redhat ≫ Enterprise Linux Server Update Services For Sap Solutions Version8.4

Redhat ≫ Enterprise Linux Workstation Version7.0

Redhat ≫ Virtualization Version4.0

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Virtualization Host Version4.0

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ 3scale Api Management Version2.0

Redhat ≫ Enterprise Linux Version7.0

Redhat ≫ Developer Tools Version1.0

   Redhat ≫ Enterprise Linux Version-
   Redhat ≫ Enterprise Linux For Ibm Z Systems Version-
   Redhat ≫ Enterprise Linux For Power Little Endian Version-

Fedoraproject ≫ Fedora Version34

Fedoraproject ≫ Fedora Version35

Redhat ≫ Ovirt-node Version4.4.10

Netapp ≫ H300s Firmware Version-

Netapp ≫ H300s Version-

Netapp ≫ H500s Firmware Version-

Netapp ≫ H500s Version-

Netapp ≫ H700s Firmware Version-

Netapp ≫ H700s Version-

Netapp ≫ H300e Firmware Version-

Netapp ≫ H300e Version-

Netapp ≫ H500e Firmware Version-

Netapp ≫ H500e Version-

Netapp ≫ H700e Firmware Version-

Netapp ≫ H700e Version-

Netapp ≫ H410s Firmware Version-

Netapp ≫ H410s Version-

Netapp ≫ H410c Firmware Version-

Netapp ≫ H410c Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.155

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

http://www.openwall.com/lists/oss-security/2022/11/30/1

Third Party Advisory

Mailing List

https://bugzilla.redhat.com/show_bug.cgi?id=2042404

Third Party Advisory

Issue Tracking

https://security.netapp.com/advisory/ntap-20220526-0001/

Third Party Advisory

https://www.openwall.com/lists/oss-security/2022/01/25/12

Third Party Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2022-0330

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-0330

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-0330

EUVD