Lucene search
RedhatVULNRICHMENT:CVE-2022-0185HistoryFeb 11, 2022 - 5:40 p.m.
CVE-2022-0185
2022-02-1117:40:57
CWE-190
redhat
github.com
5
heap-based buffer overflow
linux kernel
filesystem context
privilege escalation
AI Score
8.3
Confidence
High
EPSS
0.002
Percentile
62.1%
SSVC
Exploitation
active
Automatable
no
Technical Impact
total
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
ADP Affected
[
{
"cpes": [
"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
],
"vendor": "linux",
"product": "linux_kernel",
"versions": [
{
"status": "affected",
"version": "8.4"
}
],
"defaultStatus": "unknown"
}
]Related
redhatcve
redhatcve
CVE-2022-0185
2022-01-18 19:18:49
ubuntu
ubuntu
Linux kernel vulnerability
2022-01-19 00:00:00
Kernel Live Patch Security Notice
2022-01-20 00:00:00
Linux kernel (Intel IOTG) vulnerabilities
2022-04-01 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.15.16-100.fc34
2022-01-22 01:18:36
[SECURITY] Fedora 35 Update: kernel-5.15.16-200.fc35
2022-01-22 01:32:03
debiancve
debiancve
CVE-2022-0185
2022-02-11 18:15:10
mageia
mageia
Updated kernel packages fix security vulnerability
2022-01-22 00:41:23
Updated kernel-linus packages fix security vulnerability
2022-01-22 00:41:23
veracode
veracode
Denial Of Service (DoS)
2022-01-20 05:51:17
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2022-6d4082d590)
2022-01-22 00:00:00
Mageia: Security Advisory (MGASA-2022-0027)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2022-0026)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2022-0185
2022-02-11 17:40:57
cve
cve
CVE-2022-0185
2022-02-11 18:15:10
osv
osv
kernel-devel-5.16.2-1.1 on GA media
2024-06-15 00:00:00
Important: kernel security and bug fix update
2022-01-19 13:59:09
githubexploit
githubexploit
Exploit for Integer Underflow (Wrap or Wraparound) in Linux Linux Kernel
2022-01-26 16:27:50
Exploit for Integer Underflow (Wrap or Wraparound) in Linux Linux Kernel
2022-04-05 07:48:35
Exploit for Integer Underflow (Wrap or Wraparound) in Linux Linux Kernel
2024-04-15 02:42:43
nessus
nessus
ubuntucve
ubuntucve
CVE-2022-0185
2022-01-18 00:00:00
cnvd
cnvd
Linux kernel heap buffer overflow vulnerability (CNVD-2022-68564)
2022-01-21 00:00:00
prion
prion
Heap overflow
2022-02-11 18:15:00
attackerkb
attackerkb
CVE-2022-0185
2022-02-11 00:00:00
nvd
nvd
CVE-2022-0185
2022-02-11 18:15:10
cloudfoundry
cloudfoundry
USN-5240-1: Linux kernel vulnerability | Cloud Foundry
2022-03-11 00:00:00
cisa_kev
cisa_kev
Linux Kernel Heap-Based Buffer Overflow Vulnerability
2024-08-21 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2022-01-19 00:00:00
Unbreakable Enterprise kernel security update
2022-01-19 00:00:00
kernel security and bug fix update
2022-01-21 00:00:00
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2022-0185 affecting package kernel 5.10.161.1-1
2022-02-25 01:46:15
CVE-2022-0185 affecting package kernel for versions less than 5.15.26.1-1
2022-04-09 06:52:47
f5
f5
K73200428 : Linux kernel vulnerability CVE-2022-0185
2022-03-02 00:00:00
redhat
redhat
(RHSA-2022:0176) Important: kernel-rt security and bug fix update
2022-01-19 09:43:06
(RHSA-2022:0232) Important: kpatch-patch security update
2022-01-24 09:04:18
(RHSA-2022:0188) Important: kernel security and bug fix update
2022-01-19 13:59:09
rocky
rocky
kernel-rt security and bug fix update
2022-01-19 22:58:41
kernel security and bug fix update
2022-01-19 22:55:48
kernel-rt security and bug fix update
2022-01-19 09:43:06
almalinux
almalinux
Important: kernel security and bug fix update
2022-01-19 13:59:09
threatpost
threatpost
Bug in the Linux Kernel Allows Privilege Escalation, Container Escape
2022-03-08 14:52:05
thn
thn
12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
2022-01-26 05:39:00
China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws
2024-03-22 11:28:00
trellix
trellix
The Bug Report - January 2022 Edition
2022-02-02 00:00:00
The Bug Report - January 2022 Edition
2022-02-02 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0146
2022-01-25 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0146
2022-01-25 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-01-25 00:00:00
Security update for the Linux Kernel (important)
2022-01-26 00:00:00
debian
debian
[SECURITY] [DSA 5050-1] linux security update
2022-01-20 16:46:05
redos
redos
ROS-20220919-01
2022-09-19 00:00:00
AI Score
8.3
Confidence
High
EPSS
0.002
Percentile
62.1%
SSVC
Exploitation
active
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2022-0185