CVE-2022-2873

2022-08-2200:00:00

ubuntu.com

linux kernel

ismt smbus

memory access

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s
iSMT SMBus host controller driver in the way a user triggers the
I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data.
This flaw allows a local user to crash the system.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-47.51UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1019.23UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1019.23~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1019.24UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1019.24~20.04.1UNKNOWN
ubuntu22.04noarchlinux-gcp< 5.15.0-1017.23UNKNOWN
ubuntu20.04noarchlinux-gcp-5.15< 5.15.0-1017.23~20.04.2UNKNOWN
ubuntu22.04noarchlinux-gke< 5.15.0-1015.18UNKNOWN
ubuntu20.04noarchlinux-gke-5.15< 5.15.0-1015.18~20.04.1UNKNOWN
ubuntu22.04noarchlinux-gkeop< 5.15.0-1002.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-47.51	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1019.23	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1019.23~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1019.24	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1019.24~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-gcp	< 5.15.0-1017.23	UNKNOWN
ubuntu	20.04	noarch	linux-gcp-5.15	< 5.15.0-1017.23~20.04.2	UNKNOWN
ubuntu	22.04	noarch	linux-gke	< 5.15.0-1015.18	UNKNOWN
ubuntu	20.04	noarch	linux-gke-5.15	< 5.15.0-1015.18~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-gkeop	< 5.15.0-1002.4	UNKNOWN