Tracker / CVE-2022-2639
CVE-2022-2639
High 7.8
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected products and versions
| linux | linux_kernel · 3.18.139 → 3.19 |
|---|---|
| linux | linux_kernel · 4.14.112 → 4.14.277 |
| linux | linux_kernel · 4.19.35 → 4.19.240 |
| linux | linux_kernel · 4.4.179 → 4.5 |
| linux | linux_kernel · 4.9.169 → 4.9.312 |
| linux | linux_kernel · 5.0.8 → 5.4.191 |
| linux | linux_kernel · 5.11 → 5.15.36 |
| linux | linux_kernel · 5.16 → 5.17.5 |
| linux | linux_kernel · 5.5 → 5.10.113 |
| redhat | enterprise_linux |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.