CVE-2022-0998
En bref Sévérité Non disponible EPSS EPSS 0.37 % · centile 31 (2026-10-27) État PUBLISHED Publiée 2022-03-30 Mise à jour 2024-08-02 Attribuée par redhat Statut NVD Modified Description An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.7 < 5.10.88cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.11 < 5.15.11cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*Produits affectés Produit Versions Kernel affected Linux kernel 5.17-rc1
Références
Sources
