imPC@ndo IT

Tracker / CVE-2022-2639

CVE-2022-2639

High 7.8

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products and versions

linux linux_kernel · 3.18.139 → 3.19
linux linux_kernel · 4.14.112 → 4.14.277
linux linux_kernel · 4.19.35 → 4.19.240
linux linux_kernel · 4.4.179 → 4.5
linux linux_kernel · 4.9.169 → 4.9.312
linux linux_kernel · 5.0.8 → 5.4.191
linux linux_kernel · 5.11 → 5.15.36
linux linux_kernel · 5.16 → 5.17.5
linux linux_kernel · 5.5 → 5.10.113
redhat enterprise_linux

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References