CVE-2022-2977CWE-416

A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices

published September 14, 2022

CVSS
—
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-416 · Use After Free
Published
2022-09-14T00:00Z
EPSS history
Timeline
  • 14 SEP 00:00Z
    A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices
    cvelistv5