CVE-2022-3170CWE-125

An out-of-bounds access issue was found in the Linux kernel sound subsystem

published September 13, 2022

CVSS
—
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-09-13T15:36Z
EPSS history
Timeline
  • 13 SEP 15:36Z
    An out-of-bounds access issue was found in the Linux kernel sound subsystem
    cvelistv5