CVE-2022-0330

CWE-28116 documents7 sources
Severity
7.8HIGH
EPSS
0.0%
top 88.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
30
Linux Linux KernelFedoraproject FedoraRedhat 3scale API Management+27 more
Timeline
PublishedMar 25
Latest updateJul 13

Description

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages13 packages

▶NVDlinux/linux_kernel< 5.17+1
▶CVEListV5kernelkernel 5.17-rc2
▶NVDredhat/codeready_linux_builder8.0, 8.4, 8.2+2
▶Debianlinux< 5.10.92-2+3

Also affects: Enterprise Linux 8.0, 8.2, 8.4, 7.0, 7, 8, 7.3, 7.4, 7.6, 7.7, 8.1, Fedora 34, 35

🔴Vulnerability Details

2
OSV
CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU↗2022-03-25
▶
CVEList
CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU↗2022-03-25
▶

📋Vendor Advisories

13
Ubuntu
Linux kernel (AWS) vulnerabilities↗2022-07-13
▶
Ubuntu
Linux kernel vulnerabilities↗2022-07-07
▶
Ubuntu
Linux kernel (Intel IOTG) vulnerabilities↗2022-04-01
▶
Microsoft
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system ↗2022-03-08
▶
Ubuntu
Linux kernel vulnerabilities↗2022-02-22
▶
CVE-2022-0330 (HIGH CVSS 7.8) | A random memory access flaw was fou | cvebase.io