Privilege Escalation

2022-05-2500:43:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

37.0%

JSON

kernel is vulnerable to privilege escalation. There is a possible linked list corruption in uvc_scan_chain_forward of uvc_driver.c due to an unusual root cause which could lead to a local escalation of privileges in the library with no additional execution privileges needed.

CPENameOperatorVersion
kernel-rteq4.18.0__348.2.1.rt7.132.el8_5
kernel-rteq3.10.0__693.2.2.rt56.623.el7
kernel-rteq4.18.0__257.rt7.22.el8
kernel-rteq4.18.0__331.rt7.112.el8
kernel-rteq4.18.0__236.rt7.49.el8
kernel-rteq4.18.0__193.24.1.rt13.74.el8_2.dt1
kernel-rteq4.18.0__348.rt7.130.el8
kernel-rteq3.10.0__957.10.1.rt56.921.el7
kernel-rteq3.10.0__1127.rt56.1093.el7
kernel-rteq3.10.0__693.11.1.rt56.632.el7

Name	Operator	Version
kernel-rt	eq	4.18.0__348.2.1.rt7.132.el8_5
kernel-rt	eq	3.10.0__693.2.2.rt56.623.el7
kernel-rt	eq	4.18.0__257.rt7.22.el8
kernel-rt	eq	4.18.0__331.rt7.112.el8
kernel-rt	eq	4.18.0__236.rt7.49.el8
kernel-rt	eq	4.18.0__193.24.1.rt13.74.el8_2.dt1
kernel-rt	eq	4.18.0__348.rt7.130.el8
kernel-rt	eq	3.10.0__957.10.1.rt56.921.el7
kernel-rt	eq	3.10.0__1127.rt56.1093.el7
kernel-rt	eq	3.10.0__693.11.1.rt56.632.el7