CVE-2022-20166
published 2022-06-15CVE-2022-20166: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of…
PriorityP429medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.15%
4.6th percentile
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.4-1 (bookworm) | linux 5.10.4-1 (bookworm) |
| linux | linux_kernel | >= 0 < 5.10.4-1 | 5.10.4-1 |
| linux | linux_kernel | >= 0 < 5.10.4-1 | 5.10.4-1 |
| linux | linux_kernel | >= 0 < 5.10.4-1 | 5.10.4-1 |
| linux | linux_kernel | >= 0 < 5.10.4-1 | 5.10.4-1 |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv6.7MEDIUM
vendor_debian6.7MEDIUM
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-36rx-pq58-x4rv: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow
ghsa_unreviewed·2022-06-16
CVE-2022-20166 [MEDIUM] CWE-787 GHSA-36rx-pq58-x4rv: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel
OSV
CVE-2022-20166: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow
osv·2022-06-15·CVSS 6.7
CVE-2022-20166 [MEDIUM] CVE-2022-20166: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel
OSV
CVE-2022-20166: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow
osv·2022-06-01
CVE-2022-20166 CVE-2022-20166: In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Red Hat
kernel: possible buffer overflow in sysfs reading
vendor_redhat·2022-08-15·CVSS 6.7
CVE-2022-20166 [MEDIUM] CWE-787 kernel: possible buffer overflow in sysfs reading
kernel: possible buffer overflow in sysfs reading
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel
A flaw was found in the Linux kernel’s sysfs layer. This flaw allows a local user who can read files under the /sysfs mount point to corrupt memory or possibly crash the system.
Mitigation: Mitigation for this issue is either not available or the currently available options does not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installati
Debian
CVE-2022-20166: linux - In various methods of kernel base drivers, there is a possible out of bounds wri...
vendor_debian·2022·CVSS 6.7
CVE-2022-20166 [MEDIUM] CVE-2022-20166: linux - In various methods of kernel base drivers, there is a possible out of bounds wri...
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel
Scope: local
bookworm: resolved (fixed in 5.10.4-1)
bullseye: resolved (fixed in 5.10.4-1)
forky: resolved (fixed in 5.10.4-1)
sid: resolved (fixed in 5.10.4-1)
trixie: resolved (fixed in 5.10.4-1)
No detection rules found.
No public exploits indexed.
2022-06-15
Published