Lucene search
HistoryJul 26, 2022 - 5:15 p.m.
CVE-2022-1651
linux
kernel
memory leak
acrn device model
virtual nics
denial of service
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
0
Percentile
5.1%
A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.
Affected configurations
Node
linuxlinux_kernelRange5.12–5.15.33
ORlinuxlinux_kernelRange5.16–5.16.19
ORlinuxlinux_kernelRange5.17–5.17.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Related
prion
prion
Memory corruption
2022-07-26 17:15:00
cbl_mariner
cbl_mariner
CVE-2022-1651 affecting package kernel for versions less than 5.15.67.1-4
2022-10-05 23:34:27
CVE-2022-1651 affecting package kernel 5.10.131.1-1
2022-09-17 05:57:05
debiancve
debiancve
CVE-2022-1651
2022-07-26 17:15:08
redhatcve
redhatcve
CVE-2022-1651
2022-05-10 13:30:50
cvelist
cvelist
CVE-2022-1651
2022-07-26 16:37:04
ubuntucve
ubuntucve
CVE-2022-1651
2022-05-12 00:00:00
cve
cve
CVE-2022-1651
2022-07-26 17:15:08
openvas
openvas
Ubuntu: Security Advisory (USN-5469-1)
2022-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2615-1)
2022-08-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2520-1)
2022-07-22 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-06-08 00:00:00
osv
osv
nessus
nessus
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-5469-1)
2022-06-08 00:00:00
SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2022:2520-1)
2022-07-22 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2615-1)
2022-08-02 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-08-01 00:00:00
Security update for the Linux Kernel (important)
2022-07-22 00:00:00
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2022-1651