Veracode Vulnerability DatabaseVERACODE:38104Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.7%
Linux kernel’s KVM is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference which allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-2153
bugzilla.redhat.com/show_bug.cgi?id=2069736
github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46ce
github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a
github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44
lists.debian.org/debian-lts-announce/2022/10/msg00000.html
lists.debian.org/debian-lts-announce/2022/11/msg00001.html
www.openwall.com/lists/oss-security/2022/06/22/1
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.7%