CVE-2022-21385

2022-08-2921:15:09

oracle

web.nvd.nist.gov

117

cve-2022-21385

oracle linux

net_rds_alloc_sgs

unprivileged local users

machine crash

cvss 3.1

nvd

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

18.8%

JSON

A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected configurations

Nvd

Node

oraclelinuxMatch-

VendorProductVersionCPE
oraclelinux-cpe:2.3:o:oracle:linux:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	linux	-	cpe:2.3:o:oracle:linux:-:::::::*

CNA Affected

[
  {
    "product": "Oracle Linux",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]