Lucene search

K
nvd[email protected]NVD:CVE-2022-3707
HistoryMar 06, 2023 - 11:15 p.m.

CVE-2022-3707

2023-03-0623:15:10
CWE-460
CWE-415
web.nvd.nist.gov
6
cve-2022-3707
intel gvt-g
vga card
system resource overload
intel_gvt_dma_map_guest_page function
local user
system crash

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.

Affected configurations

Nvd
Node
linuxlinux_kernelRange<6.1
OR
linuxlinux_kernelMatch6.1-
OR
linuxlinux_kernelMatch6.1rc1
OR
linuxlinux_kernelMatch6.1rc2
Node
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%