CVE-2022-0998CWE-190

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function

published March 30, 2022

CVSS
—
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-03-30T16:03Z
EPSS history
Timeline
  • 30 MAR 16:03Z
    An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function
    cvelistv5