CVE-2022-0330CWE-281

CVE-2022-0330

High · published March 25, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.1th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2022-03-25T23:15Z
Affected products (73)
ProductVersionsFixed in
linux/linux_kernel< 4.4.3014.4.301
linux/linux_kernel≥ 4.5, < 4.9.2994.9.299
linux/linux_kernel≥ 4.10, < 4.14.2644.14.264
linux/linux_kernel≥ 4.15, < 4.19.2274.19.227
linux/linux_kernel≥ 4.20, < 5.4.1755.4.175
linux/linux_kernel≥ 5.5, < 5.10.955.10.95
linux/linux_kernel≥ 5.11, < 5.15.185.15.18
linux/linux_kernel≥ 5.16, < 5.16.45.16.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
redhat/codeready_linux_builderall versions—
redhat/codeready_linux_builderall versions—
redhat/codeready_linux_builder_eusall versions—
redhat/codeready_linux_builder_eus_for_power_little_endianall versions—
redhat/codeready_linux_builder_for_power_little_endian_eusall versions—
redhat/codeready_linux_builder_for_power_little_endian_eusall versions—
redhat/enterprise_linux_server_update_services_for_sap_solutionsall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linux_desktopall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_for_ibm_z_systemsall versions—
redhat/enterprise_linux_for_ibm_z_systems_eusall versions—
redhat/enterprise_linux_for_ibm_z_systems_eusall versions—
redhat/enterprise_linux_for_power_big_endianall versions—
redhat/enterprise_linux_for_power_little_endianall versions—
redhat/enterprise_linux_for_power_little_endianall versions—
redhat/enterprise_linux_for_power_little_endian_eusall versions—
redhat/enterprise_linux_for_power_little_endian_eusall versions—
redhat/enterprise_linux_for_real_timeall versions—
redhat/enterprise_linux_for_real_timeall versions—
redhat/enterprise_linux_for_real_time_for_nfvall versions—
redhat/enterprise_linux_for_real_time_for_nfvall versions—
redhat/enterprise_linux_for_real_time_for_nfv_tusall versions—
redhat/enterprise_linux_for_real_time_for_nfv_tusall versions—
redhat/enterprise_linux_for_real_time_tusall versions—
redhat/enterprise_linux_for_real_time_tusall versions—
redhat/enterprise_linux_for_scientific_computingall versions—
redhat/enterprise_linux_serverall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_tusall versions—
redhat/enterprise_linux_server_tusall versions—
redhat/enterprise_linux_server_tusall versions—
redhat/enterprise_linux_server_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_workstationall versions—
redhat/virtualizationall versions—
redhat/virtualization_hostall versions—
redhat/3scale_api_managementall versions—
redhat/developer_toolsall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
redhat/ovirt-nodeall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h300e_firmwareall versions—
netapp/h500e_firmwareall versions—
netapp/h700e_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
References (8)
EPSS history
Timeline
  • 25 MAR 00:00Z
    A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU
    cvelistv5