CVE-2022-0812

Katalog CVE

CVSS 4.3 · Medium EPSS 1,4%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada linux kernel. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.

Rincian

Terbit di NVD

29 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=912288442cb2f431bf3c8cb097a5de83... mailing list · patch · advisory vendor
• https://access.redhat.com/security/cve/CVE-2022-0812 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2058361 permissions required · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2058955 issue tracking · advisory pihak ketiga
• https://ubuntu.com/security/CVE-2022-0812 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230427-0011/