Lucene search

K
nvd[email protected]NVD:CVE-2022-23089
HistoryFeb 15, 2024 - 5:15 a.m.

CVE-2022-23089

2024-02-1505:15:09
web.nvd.nist.gov
core dumping
process information
out-of-bound read
kernel crash

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled.

An out-of-bound read can happen when user constructs a specially crafted ps_string, which in turn can cause the kernel to crash.

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%