CVE-2022-36123

Katalog CVE

CVSS 7.8 · High EPSS 0,90%

Kerentanan pada linux kernel, netapp h300s firmware +4 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

Rincian

Terbit di NVD

29 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.md exploit · patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0 patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884 patch · advisory pihak ketiga
• https://sick.codes/sick-2022-128 exploit · patch · advisory pihak ketiga
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13 release notes · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220901-0003/ advisory pihak ketiga