V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2022-03034
BDU
High

Уязвимость реализации функции get_user_pages_fast() подсистемы виртуализации Kernel-based Virtual Machine (KVM) ядра операционных систем Li…

CVSS
7.4
High
EPSS
0.00
p0
Published
2022-01-01
Updated
2022-01-01
Description

Уязвимость реализации функции get_user_pages_fast() подсистемы виртуализации Kernel-based Virtual Machine (KVM) ядра операционных систем Linux связана с записью данных за пределами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои привилегии

Affected products
Novell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high availabilityNovell inc. Suse linux enterprise high performance computingNovell inc. Suse linux enterprise high performance computingNovell inc. Suse linux enterprise high performance computing
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
2022-01-01
Published
2022-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: H
High (H)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Linux
Linux Kernel
Red Hat
Red Hat Openshift Container Platform
Novell
Suse Linux Enterprise High Performance ComputingSuse Linux Enterprise Module For BasesystemSuse Linux Enterprise Workstation ExtensionSuse Linux Enterprise Module For Development ToolsSuse Manager ProxySuse Manager ServerSuse Linux Enterprise MicroSuse Manager Retail Branch ServerSuse Linux Enterprise Module For Public CloudSuse Linux Enterprise Module For Legacy Software+3
ProductVendorStatus
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high availabilitynovell inc.Tracked
suse linux enterprise high performance computingnovell inc.Tracked
suse linux enterprise high performance computingnovell inc.Tracked
suse linux enterprise high performance computingnovell inc.Tracked
Showing first 20 of 374
Source databases
BDU
Related vulnerabilities
CVE-2022-1158
External references
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1158@http://www.debian.org/security/dsa-5127-1/@http://repo.red-soft.ru/redos/7.3c/x86_64/updates/@http://ubuntu.com/security/notices/USN-5416-1@https://access.redhat.com/errata/RHSA-2022:1158@https://bugzilla.redhat.com/show_bug.cgi?id=2069793@https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1158@https://git.kernel.org/linus/2a8859f373b0a86f0ece8ec8312607eacf12485d@https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.110@https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.33@https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.19@https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2@https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.189@https://seclists.org/oss-sec/2022/q2/22@https://security.netapp.com/advisory/ntap-20230214-0003/@https://security.ublinux.ru/CVE-2022-1158@https://security-tracker.debian.org/tracker/CVE-2022-1158@https://security-tracker.debian.org/tracker/DSA-5127-1@https://ubuntu.com/security/notices/USN-5416-1@https://ubuntu.com/security/notices/USN-5467-1@https://ubuntu.com/security/notices/USN-5468-1@https://ubuntu.com/security/notices/USN-5469-1@https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16@https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17@https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17@https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47@https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47@https://www.cve.org/CVERecord?id=CVE-2022-1158@https://www.cybersecurity-help.cz/vdb/SB2022051712@https://www.openwall.com/lists/oss-security/2022/04/08/4@https://www.suse.com/security/cve/CVE-2022-1158.html@https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.7/@https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81