CVE-2022-1353CWE-200information-disclosure

CVE-2022-1353

High · published April 29, 2022

CVSS v3.1
7.1
EPSS
0%
Percentile
33.2
In the wild
Unconfirmed
What it is

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00401 · 33.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-04-29T20:15Z
Affected products (21)
ProductVersionsFixed in
linux/linux_kernel< 5.175.17
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
redhat/enterprise_linuxall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h300e_firmwareall versions—
netapp/h500e_firmwareall versions—
netapp/h700e_firmwareall versions—
netapp/h410c_firmwareall versions—
References (12)
https://bugzilla.redhat.com/show_bug.cgi?id=2066819 · [email protected]https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c · [email protected]https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · [email protected]https://security.netapp.com/advisory/ntap-20220629-0001/ · [email protected]https://www.debian.org/security/2022/dsa-5127 · [email protected]https://www.debian.org/security/2022/dsa-5173 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2066819 · af854a3a-2127-422b-91ae-364da2661108https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220629-0001/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5127 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5173 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 APR 15:46Z
    A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel
    cvelistv5