Lucene search

K
redosRedosROS-20220314-02
HistoryMar 14, 2022 - 12:00 a.m.

ROS-20220314-02

2022-03-1400:00:00
redos.red-soft.ru
17
linux
kernel
vulnerability
permissions
exploitation
page cache
files

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.121

Percentile

95.4%

Vulnerability of copy_page_to_iter_pipe and push_pipe functions of Linux kernel is related to errors
when saving permissions. Exploitation of the vulnerability could allow an attacker to overwrite the contents of the
page cache of arbitrary files

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64kernel-lt< 5.15.10-3UNKNOWN

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.121

Percentile

95.4%