A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

🗓️ 08 Apr 2022 07:00:00Reported by MicrosoftType

Information leak in Linux kernel scsi_ioctl (drivers/scsi/scsi_ioctl.c) enables privileged users to breach confidentiality.

Reporter	Title	Published	Views	Family All 401
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel may affect IBM Spectrum Protect Plus	16 Mar 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go and Linux Kernel may affect IBM Spectrum Copy Data Management	9 Dec 202214:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System	13 Dec 202213:33	–	ibm
ATTACKERKB	CVE-2022-0494	25 Mar 202219:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-042)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1813 (ALAS-2022-1813)	15 Jul 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-014)	10 Jun 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2022-003)	21 Jul 202200:00	–	nessus