CVE-2022-2977

2022-09-1400:00:00

CWE-416

redhat

www.cve.org

linux

kernel

tpm

devices

privilege escalation

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux kernel",
    "versions": [
      {
        "version": "Linux kernel versions prior to 5.18",
        "status": "affected"
      }
    ]
  }
]