CVE-2022-32981CWE-120

CVE-2022-32981

High · published June 11, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-06-11T00:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 3.13, < 4.9.3184.9.318
linux/linux_kernel≥ 4.10, < 4.14.2834.14.283
linux/linux_kernel≥ 4.15, < 4.19.2474.19.247
linux/linux_kernel≥ 4.20, < 5.4.1985.4.198
linux/linux_kernel≥ 5.5, < 5.10.1225.10.122
linux/linux_kernel≥ 5.11, < 5.15.475.15.47
linux/linux_kernel≥ 5.16.0, < 5.17.155.17.15
linux/linux_kernel≥ 5.18, < 5.18.45.18.4
linux/linux_kernelall versions—
References (4)
http://www.openwall.com/lists/oss-security/2022/06/14/3 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?id=8e1278444446fc97778a5e5c99bca1ce0bbc5ec9 · [email protected]http://www.openwall.com/lists/oss-security/2022/06/14/3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?id=8e1278444446fc97778a5e5c99bca1ce0bbc5ec9 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 10 JUN 19:42Z
    An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms
    cvelistv5