Out-of-bounds Write

2022-12-2700:47:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

kernel vulnerability

out-of-bounds write

privilege escalation

local user

memory access

0.0004 Low

EPSS

Percentile

5.1%

JSON

kernel is vulnerable to Out-of-bounds Write. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access which allows a local user to crash or potentially escalate their privileges on the system.

CPENameOperatorVersion
kerneleq4.9.54__29.el6
kerneleq2.6.32__504.23.4.el6
kerneleq2.6.32__431.53.2.el6
kerneleq4.18.0__193.6.3.el8_2
kerneleq2.6.32__358.11.1.el6
kerneleq3.10.0__1160.25.1.el7
kerneleq2.6.32__71.18.1.el6
kerneleq4.18.0__147.6.el8
kerneleq4.9.124__32.el6
kerneleq3.18.41__20.el6

Name	Operator	Version
kernel	eq	4.9.54__29.el6
kernel	eq	2.6.32__504.23.4.el6
kernel	eq	2.6.32__431.53.2.el6
kernel	eq	4.18.0__193.6.3.el8_2
kernel	eq	2.6.32__358.11.1.el6
kernel	eq	3.10.0__1160.25.1.el7
kernel	eq	2.6.32__71.18.1.el6
kernel	eq	4.18.0__147.6.el8
kernel	eq	4.9.124__32.el6
kernel	eq	3.18.41__20.el6