7.8

CVE-2022-2639

Exploit
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.18.139 < 3.19
Linux ≫ Linux Kernel Version >= 4.4.179 < 4.5
Linux ≫ Linux Kernel Version >= 4.9.169 < 4.9.312
Linux ≫ Linux Kernel Version >= 4.14.112 < 4.14.277
Linux ≫ Linux Kernel Version >= 4.19.35 < 4.19.240
Linux ≫ Linux Kernel Version >= 5.0.8 < 5.4.191
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.113
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.36
Linux ≫ Linux Kernel Version >= 5.16 < 5.17.5
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Version9.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.01% 0.771
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-192 Integer Coercion Error

Integer coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.

CWE-681 Incorrect Conversion between Numeric Types

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

https://bugzilla.redhat.com/show_bug.cgi?id=2084479
Patch
Third Party Advisory
Issue Tracking