CVE-2022-0382
Summary
| CVE | CVE-2022-0382 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-02-11 18:15:00 UTC |
|---|
| Updated | 2022-12-02 19:39:00 UTC |
|---|
| Description | An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Operating System |
Linux |
Linux Kernel |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| net ticp:fix a kernel-infoleak in __tipc_sendmsg() · torvalds/linux@d6d8683 · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 183972 Debian Security Update for linux (CVE-2022-0382)
- 198659 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5278-1)
- 198708 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5337-1)
- 198731 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5368-1)
- 900710 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8571)
- 901246 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8579-1)
- 905864 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8571-1)
- 906462 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8579-2)
