Vulnerability-Lookup

OESA-2022-1559 (CVE-2021-4159)

Vulnerability from osv_openeuler – Published: 2022-03-07 11:04 – Updated: 2026-08-06 11:04 – Source website

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.(CVE-2021-4159)

An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur.(CVE-2022-25258)

An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory.(CVE-2022-25375)

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.(CVE-2022-0617)

Severity

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2021-4159	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-25258	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-25375	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-0617	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "bpftool-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "perf-4.19.90-2203.1.0.0139.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2203.1.0.0139.oe1.src.rpm"
        ],
        "x86_64": [
          "kernel-devel-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "bpftool-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "perf-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2203.1.0.0139.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-debuginfo-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "bpftool-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2203.1.0.0138.oe1.aarch64.rpm",
          "perf-4.19.90-2203.1.0.0138.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2203.1.0.0138.oe1.src.rpm"
        ],
        "x86_64": [
          "kernel-devel-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "perf-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "bpftool-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-4.19.90-2203.1.0.0138.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2203.1.0.0138.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP2",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2203.1.0.0138.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-tools-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "perf-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "bpftool-4.19.90-2203.1.0.0139.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2203.1.0.0139.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2203.1.0.0139.oe1.src.rpm"
        ],
        "x86_64": [
          "bpftool-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "perf-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2203.1.0.0139.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2203.1.0.0139.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Medium"
  },
  "details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in the Linux kernel\u0026apos;s EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace.  A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.(CVE-2021-4159)\r\n\r\nAn issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur.(CVE-2022-25258)\r\n\r\nAn issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory.(CVE-2022-25375)\r\n\r\nA flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.(CVE-2022-0617)",
  "id": "OESA-2022-1559",
  "modified": "2026-08-06T11:04:50Z",
  "published": "2022-03-07T11:04:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1559"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4159"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25258"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25375"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0617"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2021-4159",
    "CVE-2022-25258",
    "CVE-2022-25375",
    "CVE-2022-0617"
  ]
}

CVE-2021-4159 (GCVE-0-2021-4159)

Vulnerability from cvelistv5 – Published: 2022-08-24 15:10 – Updated: 2024-08-03 17:16

Summary

Severity

No CVSS data available.

CWE

CWE-202 - - Exposure of Sensitive Information Through Data Queries

Assigner

redhat redhat root

References

5 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2036024	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2021-4159	x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
n/a	kernel	Affected: Fixed in v5.7-rc1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:16:04.247Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2036024"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2021-4159"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2021-4159"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd"
          },
          {
            "name": "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Fixed in v5.7-rc1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in the Linux kernel\u0027s EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-202",
              "description": "CWE-202 - Exposure of Sensitive Information Through Data Queries",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-02T18:06:18.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2036024"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2021-4159"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2021-4159"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd"
        },
        {
          "name": "[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-4159",
    "datePublished": "2022-08-24T15:10:57.000Z",
    "dateReserved": "2021-12-23T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:16:04.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-0617 (GCVE-0-2022-0617)

Vulnerability from cvelistv5 – Published: 2022-02-16 16:38 – Updated: 2024-08-02 23:32

Summary

Severity

No CVSS data available.

CWE

CWE-476

Assigner

redhat redhat root

References

8 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://lore.kernel.org/lkml/20220114172329.ygzry…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2022/dsa-5095	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5096	vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2022/04/13/2	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Linux kernel 5.17-rc2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:32:46.477Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/lkml/20220114172329.ygzry5rlz64ua2nr%40quack3.lan/T/"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
          },
          {
            "name": "DSA-5095",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5095"
          },
          {
            "name": "DSA-5096",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5096"
          },
          {
            "name": "[oss-security] 20220413 CVE-2022-0617: udf:A null-ptr-deref bug be triggered when write to an ICB inode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/04/13/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Linux kernel 5.17-rc2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-13T17:06:43.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/lkml/20220114172329.ygzry5rlz64ua2nr%40quack3.lan/T/"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
        },
        {
          "name": "DSA-5095",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5095"
        },
        {
          "name": "DSA-5096",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5096"
        },
        {
          "name": "[oss-security] 20220413 CVE-2022-0617: udf:A null-ptr-deref bug be triggered when write to an ICB inode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/04/13/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-0617",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Linux kernel 5.17-rc2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f"
            },
            {
              "name": "https://lore.kernel.org/lkml/20220114172329.ygzry5rlz64ua2nr@quack3.lan/T/",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/lkml/20220114172329.ygzry5rlz64ua2nr@quack3.lan/T/"
            },
            {
              "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
            },
            {
              "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
            },
            {
              "name": "DSA-5095",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5095"
            },
            {
              "name": "DSA-5096",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5096"
            },
            {
              "name": "[oss-security] 20220413 CVE-2022-0617: udf:A null-ptr-deref bug be triggered when write to an ICB inode",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/04/13/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-0617",
    "datePublished": "2022-02-16T16:38:03.000Z",
    "dateReserved": "2022-02-15T00:00:00.000Z",
    "dateUpdated": "2024-08-02T23:32:46.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-25258 (GCVE-0-2022-25258)

Vulnerability from cvelistv5 – Published: 2022-02-16 00:00 – Updated: 2024-08-03 04:36

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://github.com/torvalds/linux/commit/75e5b484…
https://github.com/szymonh/d-os-descriptor
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2022/dsa-5092	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://www.debian.org/security/2022/dsa-5096	vendor-advisory
https://security.netapp.com/advisory/ntap-2022102…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:36:06.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/75e5b4849b81e19e9efe1654b30d7f3151c33c2c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/szymonh/d-os-descriptor"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10"
          },
          {
            "name": "FEDORA-2022-9d4e48836d",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCW2KZYJ2H6BKZE3CVLHRIXYDGNYYC5P/"
          },
          {
            "name": "DSA-5092",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5092"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
          },
          {
            "name": "DSA-5096",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5096"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-28T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/torvalds/linux/commit/75e5b4849b81e19e9efe1654b30d7f3151c33c2c"
        },
        {
          "url": "https://github.com/szymonh/d-os-descriptor"
        },
        {
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10"
        },
        {
          "name": "FEDORA-2022-9d4e48836d",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCW2KZYJ2H6BKZE3CVLHRIXYDGNYYC5P/"
        },
        {
          "name": "DSA-5092",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5092"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
        },
        {
          "name": "DSA-5096",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5096"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0007/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-25258",
    "datePublished": "2022-02-16T00:00:00.000Z",
    "dateReserved": "2022-02-16T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:36:06.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-25375 (GCVE-0-2022-25375)

Vulnerability from cvelistv5 – Published: 2022-02-20 19:47 – Updated: 2024-08-03 04:36

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://github.com/torvalds/linux/commit/38ea1eac…	x_refsource_MISC
https://github.com/szymonh/rndis-co	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/02/21/1	mailing-listx_refsource_MLIST
https://www.debian.org/security/2022/dsa-5092	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2022/dsa-5096	vendor-advisoryx_refsource_DEBIAN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:36:06.951Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/38ea1eac7d88072bbffb630e2b3db83ca649b826"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/szymonh/rndis-co"
          },
          {
            "name": "[oss-security] 20220221 CVE-2022-25375 : Linux RNDIS USB Gadget memory extraction via packet filter",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/02/21/1"
          },
          {
            "name": "DSA-5092",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5092"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
          },
          {
            "name": "DSA-5096",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5096"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-10T02:06:39.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/38ea1eac7d88072bbffb630e2b3db83ca649b826"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/szymonh/rndis-co"
        },
        {
          "name": "[oss-security] 20220221 CVE-2022-25375 : Linux RNDIS USB Gadget memory extraction via packet filter",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/02/21/1"
        },
        {
          "name": "DSA-5092",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5092"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
        },
        {
          "name": "DSA-5096",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5096"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-25375",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/38ea1eac7d88072bbffb630e2b3db83ca649b826",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/38ea1eac7d88072bbffb630e2b3db83ca649b826"
            },
            {
              "name": "https://github.com/szymonh/rndis-co",
              "refsource": "MISC",
              "url": "https://github.com/szymonh/rndis-co"
            },
            {
              "name": "[oss-security] 20220221 CVE-2022-25375 : Linux RNDIS USB Gadget memory extraction via packet filter",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/02/21/1"
            },
            {
              "name": "DSA-5092",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5092"
            },
            {
              "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html"
            },
            {
              "name": "[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html"
            },
            {
              "name": "DSA-5096",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5096"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-25375",
    "datePublished": "2022-02-20T19:47:01.000Z",
    "dateReserved": "2022-02-20T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:36:06.951Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OESA-2022-1559 (CVE-2021-4159)

CVE-2021-4159 (GCVE-0-2021-4159)

CVE-2022-0617 (GCVE-0-2022-0617)

CVE-2022-25258 (GCVE-0-2022-25258)

CVE-2022-25375 (GCVE-0-2022-25375)

Tags

Sightings

Nomenclature

Related by attack behaviour