Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-12797
HistoryFeb 15, 2022 - 12:00 a.m.

Linux kernel yam.c buffer overflow vulnerability

2022-02-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

The Linux kernel is the kernel used by the Linux Foundation’s open source operating system Linux. A buffer overflow vulnerability exists in the Linux kernel, which stems from the yam_siocdevprivate function in the product/net/hamradio/yam.c file that does not effectively restrict memory boundaries. An attacker could cause a buffer overflow through this vulnerability.

CPENameOperatorVersion
linux kernellt5.16.5

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P