Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-69191
HistorySep 24, 2022 - 12:00 a.m.

Linux kernel resource management error vulnerability (CNVD-2022-69191)

2022-09-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
28

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Linux kernel is the kernel used by the Linux Foundation’s open source operating system Linux. Linux kernel 5.19.10 and earlier versions are vulnerable to a resource management error, which stems from a confusion in the directive in drivers/media/dvb-core/dmxdev.c that is responsible for freeing memory. An attacker could exploit this vulnerability to potentially cause program crashes, arbitrary code execution, etc.

CPENameOperatorVersion
linux linux kernelle5.19.10

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H