K000134782 : Intel Virtual RAID on CPU vulnerabilities CVE-2022-29919, CVE-2022-30338, CVE-2022-29508, CVE-2022-25976

Security Advisory Description

• CVE-2022-29919

Use after free in the Intel® VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

• CVE-2022-30338

Incorrect default permissions in the Intel® VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

• CVE-2022-29508

Null pointer dereference in the Intel® VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

• CVE-2022-25976

Improper input validation in the Intel® VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access.

Impact

There is no impact; F5 products are not affected by this vulnerability.