CVE-2022-0494
Summary
| CVE | CVE-2022-0494 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-03-25 19:15:00 UTC |
|---|
| Updated | 2023-11-07 03:41:00 UTC |
|---|
| Description | A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Debian -- Security Information -- DSA-5173-1 linux |
DEBIAN |
www.debian.org |
|
| 2039448 – (CVE-2022-0494) CVE-2022-0494 kernel: information leak in scsi_ioctl() |
MISC |
bugzilla.redhat.com |
|
| [PATCH] block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern - Haimin Zhang |
|
lore.kernel.org |
|
| [PATCH] block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern - Haimin Zhang |
MISC |
lore.kernel.org |
|
| [SECURITY] [DLA 3065-1] linux security update |
MLIST |
lists.debian.org |
|
| Debian -- Security Information -- DSA-5161-1 linux |
DEBIAN |
www.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160039 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-6003)
- 160171 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-7110)
- 179371 Debian Security Update for linux (DSA 5161-1)
- 180282 Debian Security Update for linux (DLA 3065-1)
- 180605 Debian Security Update for linux (DSA 5173-1)
- 184183 Debian Security Update for linux (CVE-2022-0494)
- 198747 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5381-1)
- 198891 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5560-1)
- 198895 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5562-1)
- 198911 Ubuntu Security Notification for Linux kernel (Azure CVM) Vulnerabilities (USN-5582-1)
- 199560 Ubuntu Security Notification for Linux kernel (AWS) Vulnerabilities (USN-6001-1)
- 199568 Ubuntu Security Notification for Linux kernel (AWS) Vulnerabilities (USN-6013-1)
- 199577 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6014-1)
- 240600 Red Hat Update for kernel-rt (RHSA-2022:6002)
- 240604 Red Hat Update for kernel security (RHSA-2022:6003)
- 240643 Red Hat Update for kernel-rt (RHSA-2022:6248)
- 240644 Red Hat Update for kernel (RHSA-2022:6243)
- 240776 Red Hat Update for kernel-rt (RHSA-2022:7134)
- 240782 Red Hat Update for kernel security (RHSA-2022:7110)
- 353960 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-014
- 353962 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-026
- 353976 Amazon Linux Security Advisory for kernel : ALAS-2022-1604
- 353985 Amazon Linux Security Advisory for kernel : ALAS2-2022-1813
- 354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
- 354499 Amazon Linux Security Advisory for kernel : ALAS2022-2022-042
- 354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
- 355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
- 377117 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2022:0158)
- 377871 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2023:0001)
- 6140117 AWS Bottlerocket Security Update for kernel (GHSA-48j3-m5cc-9vqw)
- 671804 EulerOS Security Update for kernel (EulerOS-SA-2022-1844)
- 671862 EulerOS Security Update for kernel (EulerOS-SA-2022-1896)
- 671870 EulerOS Security Update for kernel (EulerOS-SA-2022-1934)
- 671929 EulerOS Security Update for kernel (EulerOS-SA-2022-1999)
- 671975 EulerOS Security Update for kernel (EulerOS-SA-2022-2159)
- 672003 EulerOS Security Update for kernel (EulerOS-SA-2022-2134)
- 752370 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2520-1)
- 753148 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2615-1)
- 900811 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9270)
- 901365 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9240)
- 902034 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9270-1)
- 902126 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9240-1)
- 905829 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9270-2)
- 906354 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9240-2)
- 940634 AlmaLinux Security Update for kernel (ALSA-2022:6003)
- 940637 AlmaLinux Security Update for kernel-rt (ALSA-2022:6002)
- 940709 AlmaLinux Security Update for kernel-rt (ALSA-2022:7134)
- 940719 AlmaLinux Security Update for kernel (ALSA-2022:7110)
- 960271 Rocky Linux Security Update for kernel-rt (RLSA-2022:7134)
- 960397 Rocky Linux Security Update for kernel (RLSA-2022:7110)
