CVE-2022-36397
published 2023-02-16CVE-2022-36397: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to…
PriorityP335high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.23%
13.3th percentile
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | quickassist_technology | < 1.6 | 1.6 |
| intel | quickassist_technology | < 4.17 | 4.17 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_redhat7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
hw: Intel: Incorrect default peinrmissions in QAT driver enable escalation of privilege
vendor_redhat·2023-02-14·CVSS 7.3
CVE-2022-36397 [HIGH] hw: Intel: Incorrect default peinrmissions in QAT driver enable escalation of privilege
hw: Intel: Incorrect default peinrmissions in QAT driver enable escalation of privilege
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
A flaw was found in Intel. Incorrect default permissions in the software installer for some Intel(R) QAT drivers for the Linux Kernel may allow an authenticated user to enable privilege escalation via local access.
Mitigation: Please contact the hardware vendor for more update.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterp
OSV
CVE-2022-36397: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4
osv·2023-02-16·CVSS 7.8
CVE-2022-36397 [HIGH] CVE-2022-36397: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
GHSA
GHSA-2567-3r9v-7m92: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4
ghsa_unreviewed·2023-02-16
CVE-2022-36397 [HIGH] CWE-276 GHSA-2567-3r9v-7m92: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-16
Published