Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-2639
HistorySep 01, 2022 - 12:00 a.m.

CVE-2022-2639

2022-09-0100:00:00
ubuntu.com
ubuntu.com
78
integer coercion error
openvswitch
kernel module
local user
privilege escalation
memory access.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

An integer coercion error was found in the openvswitch kernel module. Given
a sufficiently large number of actions, while copying and reserving memory
for a new action of a new flow, the reserve_sfa_size() function does not
return -EMSGSIZE as expected, potentially leading to an out-of-bounds write
access. This flaw allows a local user to crash or potentially escalate
their privileges on the system.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-189.200UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-122.138UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-41.44UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-234.268UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1137.148UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1081.88UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1015.19UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1113.119UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1151.166UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1015.19~20.04.1UNKNOWN
Rows per page:
1-10 of 621

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%