Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-13357
HistoryFeb 10, 2022 - 12:00 a.m.

Linux kernel buffer overflow vulnerability (CNVD-2022-13357)

2022-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

Linux kernel is the kernel used by the Linux Foundation’s open source operating system Linux. kernel is one of the kernel-based virtual machines. Linux kernel is vulnerable to a buffer overflow vulnerability, which originates from a use-after-free vulnerability in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_ms.c in the Linux kernel memstick. A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in usb_ms.c. In this vulnerability, a local attacker with user privileges may be able to compromise system confidentiality. No detailed vulnerability details are currently available.

CPENameOperatorVersion
linuxlinux kernelle5.13.19

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N