Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79427
HistoryMar 25, 2022 - 12:00 a.m.

Linux Kernel Buffer Overflow Vulnerability (CNVD-2022-79427)

2022-03-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
linux kernel
buffer overflow
net/ipv4/esp4.c
net/ipv6/esp6.c
data validation
arbitrary code execution
elevated privileges
cnvd-2022-79427

EPSS

0

Percentile

5.1%

Linux kernel is the kernel used by the Linux Foundation’s open source operating system, Linux. Linux kernel is vulnerable to a buffer overflow vulnerability that results from not properly validating data boundaries when executing operations on net/ipv4/esp4.c and net/ipv6/esp6.c in memory. A local attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code on the system or gain elevated privileges in certain configurations.