CVE-2022-36123

CVE-2022-36123

High · published July 29, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Published
2022-07-29T18:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel< 5.18.135.18.13
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
References (14)
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13 · [email protected]https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.md · [email protected]https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0 · [email protected]https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884 · [email protected]https://security.netapp.com/advisory/ntap-20220901-0003/ · [email protected]https://sick.codes/sick-2022-128 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13 · af854a3a-2127-422b-91ae-364da2661108https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.md · af854a3a-2127-422b-91ae-364da2661108https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0 · af854a3a-2127-422b-91ae-364da2661108https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220901-0003/ · af854a3a-2127-422b-91ae-364da2661108https://sick.codes/sick-2022-128 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-202008.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 29 JUL 13:43Z
    The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss)
    cvelistv5