Lucene search

RedhatCVE-2022-2639

HistorySep 01, 2022 - 9:15 p.m.

CVE-2022-2639

2022-09-0121:15:09

CWE-192

CWE-681

redhat

web.nvd.nist.gov

171

cve-2022-2639

integer coercion error

openvswitch

kernel module

memory access

privilege escalation

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelRange3.18.139–3.19

linuxlinux_kernelRange4.4.179–4.5

linuxlinux_kernelRange4.9.169–4.9.312

linuxlinux_kernelRange4.14.112–4.14.277

linuxlinux_kernelRange4.19.35–4.19.240

linuxlinux_kernelRange5.0.8–5.4.191

linuxlinux_kernelRange5.5–5.10.113

linuxlinux_kernelRange5.11–5.15.36

linuxlinux_kernelRange5.16–5.17.5

Node

redhatenterprise_linuxMatch8.0

redhatenterprise_linuxMatch9.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	enterprise_linux	9.0	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "kernel 5.18"
      }
    ]
  }
]