CVE-2022-1508 — Out-of-bounds Read in Kernel
Severity
6.1MEDIUMNVD
EPSS
0.1%
top 68.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 31
Latest updateSep 1
Description
An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parameters. This flaw allows a local user to read some memory out of bounds.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:HExploitability: 1.8 | Impact: 4.2
Affected Packages7 packages
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-mjrx-6f7j-qvf7: An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special paramet↗2022-09-01
OSV▶
CVE-2022-1508: An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special paramet↗2022-08-31
📋Vendor Advisories
3Microsoft▶
An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parameters. This flaw allows a local user to read some me↗2022-08-09
Debian▶
CVE-2022-1508: linux - An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in th...↗2022