Lucene search

RedhatCVE-2022-0330

HistoryMar 25, 2022 - 7:15 p.m.

CVE-2022-0330

2022-03-2519:15:10

CWE-281

redhat

web.nvd.nist.gov

342

cve-2022-0330

linux kernel

gpu

i915

memory access flaw

privilege escalation

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

A random memory access flaw was found in the Linux kernel’s GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelRange<5.17

linuxlinux_kernelMatch5.17-

linuxlinux_kernelMatch5.17rc1

Node

redhatcodeready_linux_builderMatch8.0

redhatcodeready_linux_builderMatch8.4

redhatcodeready_linux_builder_eusMatch8.2

redhatcodeready_linux_builder_eus_for_power_little_endianMatch8.2

redhatcodeready_linux_builder_for_power_little_endian_eusMatch8.0

redhatcodeready_linux_builder_for_power_little_endian_eusMatch8.4

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.7

redhatenterprise_linuxMatch8.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_eusMatch8.2

redhatenterprise_linux_eusMatch8.4

redhatenterprise_linux_for_ibm_z_systemsMatch8.0

redhatenterprise_linux_for_ibm_z_systems_eusMatch8.2

redhatenterprise_linux_for_ibm_z_systems_eusMatch8.4

redhatenterprise_linux_for_power_big_endianMatch7.0

redhatenterprise_linux_for_power_little_endianMatch7.0

redhatenterprise_linux_for_power_little_endianMatch8.0

redhatenterprise_linux_for_power_little_endian_eusMatch8.2

redhatenterprise_linux_for_power_little_endian_eusMatch8.4

redhatenterprise_linux_for_real_timeMatch7

redhatenterprise_linux_for_real_timeMatch8

redhatenterprise_linux_for_real_time_for_nfvMatch7

redhatenterprise_linux_for_real_time_for_nfvMatch8

redhatenterprise_linux_for_real_time_for_nfv_tusMatch8.2

redhatenterprise_linux_for_real_time_for_nfv_tusMatch8.4

redhatenterprise_linux_for_real_time_tusMatch8.2

redhatenterprise_linux_for_real_time_tusMatch8.4

redhatenterprise_linux_for_scientific_computingMatch7.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_server_ausMatch7.3

redhatenterprise_linux_server_ausMatch7.4

redhatenterprise_linux_server_ausMatch7.6

redhatenterprise_linux_server_ausMatch7.7

redhatenterprise_linux_server_ausMatch8.2

redhatenterprise_linux_server_ausMatch8.4

redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch7.6

redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch7.7

redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.1

redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.2

redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.4

redhatenterprise_linux_server_tusMatch7.7

redhatenterprise_linux_server_tusMatch8.2

redhatenterprise_linux_server_tusMatch8.4

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.6

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.1

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.2

redhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.4

redhatenterprise_linux_workstationMatch7.0

Node

redhatenterprise_linuxMatch8.0

AND

redhatvirtualizationMatch4.0

redhatvirtualization_hostMatch4.0

Node

redhatenterprise_linuxMatch7.0

AND

redhat3scale_api_managementMatch2.0

Node

redhatdeveloper_toolsMatch1.0

AND

redhatenterprise_linuxMatch-

redhatenterprise_linux_for_ibm_z_systemsMatch-

redhatenterprise_linux_for_power_little_endianMatch-

Node

fedoraprojectfedoraMatch34

fedoraprojectfedoraMatch35

Node

redhatovirt-nodeMatch4.4.10

Node

netapph300s_firmwareMatch-

AND

netapph300sMatch-

Node

netapph500s_firmwareMatch-

AND

netapph500sMatch-

Node

netapph700sMatch-

AND

netapph700s_firmwareMatch-

Node

netapph300eMatch-

AND

netapph300e_firmwareMatch-

Node

netapph500eMatch-

AND

netapph500e_firmwareMatch-

Node

netapph700eMatch-

AND

netapph700e_firmwareMatch-

Node

netapph410sMatch-

AND

netapph410s_firmwareMatch-

Node

netapph410cMatch-

AND

netapph410c_firmwareMatch-

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "kernel",
    "versions": [
      {
        "version": "kernel 5.17-rc2",
        "status": "affected"
      }
    ]
  }
]