Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-47939
HistoryDec 23, 2022 - 12:00 a.m.

CVE-2022-47939

2022-12-2300:00:00
ubuntu.com
ubuntu.com
142

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.7%

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19
before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for
SMB2_TREE_DISCONNECT.

Notes

Author Note
sbeattie needs ksmbd-tools installed to enable the service, which is not installed by default.
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-53.59UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1023.27UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1023.27~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1023.29UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1023.29~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1023.29UNKNOWN
ubuntu20.04noarchlinux-azure-fde-5.15< 5.15.0-1023.29~20.04.1UNKNOWN
ubuntu22.04noarchlinux-gcp< 5.15.0-1022.29UNKNOWN
ubuntu20.04noarchlinux-gcp-5.15< 5.15.0-1022.29~20.04.1UNKNOWN
ubuntu22.04noarchlinux-gke< 5.15.0-1020.25UNKNOWN
Rows per page:
1-10 of 241

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.7%