7.1

CVE-2022-50200

selinux: Add boundary check in put_entry()

In the Linux kernel, the following vulnerability has been resolved:

selinux: Add boundary check in put_entry()

Just like next_entry(), boundary check is necessary to prevent memory
out-of-bound access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.37 < 4.14.291
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.256
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.211
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.137
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.61
Linux ≫ Linux Kernel Version >= 5.16 < 5.18.18
Linux ≫ Linux Kernel Version >= 5.19 < 5.19.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/2dabe6a872a5744865372eb30ea51e8ccd21305a
Patch
https://git.kernel.org/stable/c/477722f31ad73aa779154d1d7e00825538389f76
Patch
https://git.kernel.org/stable/c/90bdf50ae70c5571a277b5601e4f5df210831e0a
Patch
https://git.kernel.org/stable/c/adbfdaacde18faf6cd4e490764045375266b3fbd
Patch
https://git.kernel.org/stable/c/7363a69d8ca8f0086f8e1196c8ddaf0e168614b1
Patch
https://git.kernel.org/stable/c/9605f50157cae00eb299e1189a6d708c84935ad8
Patch
https://git.kernel.org/stable/c/dedd558d9765b72c66e5a53948e9f5abc3ece1f6
Patch
https://git.kernel.org/stable/c/15ec76fb29be31df2bccb30fc09875274cba2776
Patch