CVE-2022-0480

2022-08-2915:15:09

Debian Security Bug Tracker

security-tracker.debian.org

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

14.3%

JSON

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.15.3-1linux_5.15.3-1_all.deb
Debian11alllinux<= 5.10.218-1linux_5.10.218-1_all.deb
Debian999alllinux< 5.15.3-1linux_5.15.3-1_all.deb
Debian13alllinux< 5.15.3-1linux_5.15.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.15.3-1	linux_5.15.3-1_all.deb
Debian	11	all	linux	<= 5.10.218-1	linux_5.10.218-1_all.deb
Debian	999	all	linux	< 5.15.3-1	linux_5.15.3-1_all.deb
Debian	13	all	linux	< 5.15.3-1	linux_5.15.3-1_all.deb