CVE-2022-1353
Summary
| CVE | CVE-2022-1353 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-29 16:15:00 UTC |
| Updated | 2023-11-09 14:44:00 UTC |
| Description | A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Debian | Debian Linux | 9.0 | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc7 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc8 | All | All |
| Hardware | Netapp | Baseboard Management Controller H300e | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H300e Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H300s | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H300s Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H410c | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H410c Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H410s | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H410s Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H500e | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H500e Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H500s | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H500s Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H700e | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H700e Firmware | - | All | All | All |
| Hardware | Netapp | Baseboard Management Controller H700s | - | All | All | All |
| Operating System | Netapp | Baseboard Management Controller H700s Firmware | - | All | All | All |
| Hardware | Netapp | H300e | - | All | All | All |
| Operating System | Netapp | H300e Firmware | - | All | All | All |
| Hardware | Netapp | H300s | - | All | All | All |
| Operating System | Netapp | H300s Firmware | - | All | All | All |
| Hardware | Netapp | H410c | - | All | All | All |
| Operating System | Netapp | H410c Firmware | - | All | All | All |
| Hardware | Netapp | H410s | - | All | All | All |
| Operating System | Netapp | H410s Firmware | - | All | All | All |
| Hardware | Netapp | H500e | - | All | All | All |
| Operating System | Netapp | H500e Firmware | - | All | All | All |
| Hardware | Netapp | H500s | - | All | All | All |
| Operating System | Netapp | H500s Firmware | - | All | All | All |
| Hardware | Netapp | H700e | - | All | All | All |
| Operating System | Netapp | H700e Firmware | - | All | All | All |
| Hardware | Netapp | H700s | - | All | All | All |
| Operating System | Netapp | H700s Firmware | - | All | All | All |
| Operating System | Redhat | Enterprise Linux | 8.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-5127-1 linux | DEBIAN | www.debian.org | |
| May 2022 Linux Kernel Vulnerabilities in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| Debian -- Security Information -- DSA-5173-1 linux | DEBIAN | www.debian.org | |
| 2066819 – (CVE-2022-1353) CVE-2022-1353 Kernel: A kernel-info-leak issue in pfkey_register | MISC | bugzilla.redhat.com | |
| [SECURITY] [DLA 3065-1] linux security update | MLIST | lists.debian.org | |
| af_key: add __GFP_ZERO flag for compose_sadb_supported in function pf… · torvalds/linux@9a564bc · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159896 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9479)
- 159899 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9480)
- 160171 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-7110)
- 160270 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-8267)
- 160346 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-26385)
- 179258 Debian Security Update for linux (DSA 5127-1)
- 180282 Debian Security Update for linux (DLA 3065-1)
- 180605 Debian Security Update for linux (DSA 5173-1)
- 183681 Debian Security Update for linux (CVE-2022-1353)
- 198822 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5469-1)
- 198824 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5467-1)
- 198858 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5515-1)
- 240599 Red Hat Update for kernel-rt (RHSA-2022:5934)
- 240603 Red Hat Update for kernel (RHSA-2022:5998)
- 240643 Red Hat Update for kernel-rt (RHSA-2022:6248)
- 240644 Red Hat Update for kernel (RHSA-2022:6243)
- 240776 Red Hat Update for kernel-rt (RHSA-2022:7134)
- 240782 Red Hat Update for kernel security (RHSA-2022:7110)
- 240869 Red Hat Update for kernel-rt (RHSA-2022:7933)
- 240904 Red Hat Update for kernel security (RHSA-2022:8267)
- 353293 Amazon Linux Security Advisory for kernel : ALAS2-2022-1793
- 353956 Amazon Linux Security Advisory for kernel : ALAS-2022-1591
- 353964 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2022-001
- 354327 Amazon Linux Security Advisory for kernel : ALAS2022-2022-083
- 354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
- 354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
- 355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
- 355563 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2023-036
- 355565 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2023-023
- 376925 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2022:0125)
- 377053 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2022:0028)
- 6140343 AWS Bottlerocket Security Update for kernel (GHSA-p2v7-3rfx-jq76)
- 671862 EulerOS Security Update for kernel (EulerOS-SA-2022-1896)
- 671870 EulerOS Security Update for kernel (EulerOS-SA-2022-1934)
- 671915 EulerOS Security Update for kernel (EulerOS-SA-2022-1969)
- 671929 EulerOS Security Update for kernel (EulerOS-SA-2022-1999)
- 671975 EulerOS Security Update for kernel (EulerOS-SA-2022-2159)
- 672003 EulerOS Security Update for kernel (EulerOS-SA-2022-2134)
- 752120 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1651-1)
- 752125 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1686-1)
- 752126 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1687-1)
- 752231 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2082-1)
- 752237 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2083-1)
- 752240 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2103-1)
- 752242 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2104-1)
- 752250 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2111-1)
- 753176 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1676-1)
- 753299 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1669-1)
- 753703 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 753707 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 753727 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 901304 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9653)
- 901910 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9646)
- 902010 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9653-1)
- 902092 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9646-1)
- 905856 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9653-2)
- 906514 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9646-2)
- 940709 AlmaLinux Security Update for kernel-rt (ALSA-2022:7134)
- 940719 AlmaLinux Security Update for kernel (ALSA-2022:7110)
- 940798 AlmaLinux Security Update for kernel (ALSA-2022:8267)
- 940843 AlmaLinux Security Update for kernel-rt (ALSA-2022:7933)
- 960271 Rocky Linux Security Update for kernel-rt (RLSA-2022:7134)
- 960397 Rocky Linux Security Update for kernel (RLSA-2022:7110)