CVE-2022-0168CWE-476

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due…

published August 26, 2022

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-08-26T17:25Z
EPSS history
Timeline
  • 26 AUG 17:25Z
    A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due…
    cvelistv5