Lucene search

K
nvd[email protected]NVD:CVE-2022-2938
HistoryAug 23, 2022 - 8:15 p.m.

CVE-2022-2938

2022-08-2320:15:08
CWE-416
web.nvd.nist.gov
1
linux
kernel
pressure stall info
crash
memory-corruption

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.6%

A flaw was found in the Linux kernel’s implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side effects.

Affected configurations

NVD
Node
linuxlinux_kernelRange5.25.4.177
OR
linuxlinux_kernelRange5.55.10.97
OR
linuxlinux_kernelRange5.115.15.19
OR
linuxlinux_kernelRange5.165.16.5
Node
fedoraprojectfedoraMatch35
OR
redhatenterprise_linuxMatch8.0
Node
netapph300s_firmwareMatch-
AND
netapph300sMatch-
Node
netapph500s_firmwareMatch-
AND
netapph500sMatch-
Node
netapph700s_firmwareMatch-
AND
netapph700sMatch-
Node
netapph410s_firmwareMatch-
AND
netapph410sMatch-
Node
netapph410c_firmwareMatch-
AND
netapph410cMatch-

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.6%