7.8

CVE-2022-23222

Exploit
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.8.0 < 5.15.37
Linux ≫ Linux Kernel Version >= 5.16 < 5.16.11
Debian ≫ Debian Linux Version 11.0
Netapp ≫ H410c Firmware Version -
   Netapp ≫ H410c Version -
Netapp ≫ H300s Firmware Version -
   Netapp ≫ H300s Version -
Netapp ≫ H500s Firmware Version -
   Netapp ≫ H500s Version -
Netapp ≫ H700s Firmware Version -
   Netapp ≫ H700s Version -
Netapp ≫ H300e Firmware Version -
   Netapp ≫ H300e Version -
Netapp ≫ H500e Firmware Version -
   Netapp ≫ H500e Version -
Netapp ≫ H700e Firmware Version -
   Netapp ≫ H700e Version -
Netapp ≫ H410s Firmware Version -
   Netapp ≫ H410s Version -
Fedoraproject ≫ Fedora Version 34
Fedoraproject ≫ Fedora Version 35
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.779
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.debian.org/security/2022/dsa-5050
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/01/14/1
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2022/01/18/2
Third Party Advisory
Exploit
Mailing List
http://www.openwall.com/lists/oss-security/2022/06/01/1
Patch
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2022/06/04/3
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2022/06/07/3
Third Party Advisory
Mailing List
https://bugzilla.suse.com/show_bug.cgi?id=1194765
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=64620e0a1e712a778095bd35cbb277dc2259281f
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCR3LIRUEXR7CA63W5M2HT3K63MZGKBR/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5VTIZZUPC73IEJNZX66BY2YCBRZAELB/
https://security.netapp.com/advisory/ntap-20220217-0002/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/01/13/1
Third Party Advisory
Mailing List