Vulnerability CVE-2022-0998: Information

Description

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-0998
Published: March 30, 2022
Modified: Nov. 7, 2023
Error type identifier: CWE-190

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-mpsisyphus5.15.12-alt16.9.4-alt1ALT-PU-2021-3644-1292782Fixed
kernel-image-mpp106.1.19-alt16.1.19-alt1ALT-PU-2023-4894-3327092Fixed
kernel-image-mpp115.15.12-alt16.8.8-alt1ALT-PU-2021-3644-1292782Fixed
kernel-image-rpi-defsisyphus5.15.25-alt15.15.92-alt2ALT-PU-2022-1419-1296090Fixed
kernel-image-rpi-defp105.15.25-alt15.15.92-alt2ALT-PU-2022-1421-1296181Fixed
kernel-image-rpi-defp115.15.25-alt15.15.92-alt2ALT-PU-2022-1419-1296090Fixed
kernel-image-rpi-unsisyphus5.15.13-alt16.6.23-alt1ALT-PU-2022-1015-1293241Fixed
kernel-image-rpi-unp105.15.13-alt16.1.77-alt1ALT-PU-2022-1016-1293286Fixed
kernel-image-rpi-unp115.15.13-alt16.6.23-alt1ALT-PU-2022-1015-1293241Fixed
kernel-image-rtsisyphus5.10.90-alt1.rt606.1.92-alt1.rt32ALT-PU-2022-1012-1293156Fixed
kernel-image-rtp105.10.100-alt1.rt625.10.218-alt1.rt110ALT-PU-2022-1428-1295376Fixed
kernel-image-rtp115.10.90-alt1.rt606.1.90-alt2.rt30ALT-PU-2022-1012-1293156Fixed
kernel-image-std-defsisyphus5.10.88-alt16.1.93-alt1ALT-PU-2021-3611-1292506Fixed
kernel-image-std-defp105.10.88-alt15.10.218-alt1ALT-PU-2021-3636-1292505Fixed
kernel-image-std-defc9f25.10.104-alt0.c9f.25.10.214-alt0.c9f.2ALT-PU-2022-1467-1296399Fixed
kernel-image-std-defp115.10.88-alt16.1.91-alt1ALT-PU-2021-3611-1292506Fixed
kernel-image-std-kvmsisyphus5.10.91-alt15.10.176-alt1ALT-PU-2022-1057-1293503Fixed
kernel-image-std-kvmp115.10.91-alt15.10.176-alt1ALT-PU-2022-1057-1293503Fixed
kernel-image-un-defsisyphus5.15.11-alt16.6.33-alt1ALT-PU-2021-3610-1292507Fixed
kernel-image-un-defsisyphus_riscv645.16.8-alt1.rv646.6.32-alt1.0.portALT-PU-2022-3985-1-Fixed
kernel-image-un-defp105.15.11-alt26.1.90-alt1ALT-PU-2021-3660-1291610Fixed
kernel-image-un-defp95.10.89-alt15.10.218-alt1ALT-PU-2022-1017-1292817Fixed
kernel-image-un-defc10f15.15.11-alt26.1.85-alt0.c10f.1ALT-PU-2021-3660-1291610Fixed
kernel-image-un-defp115.15.11-alt16.6.31-alt1ALT-PU-2021-3610-1292507Fixed
linux-toolssisyphus_riscv645.16-alt16.9-alt1ALT-PU-2022-3659-1-Fixed
linux-toolsp106.1-alt0.p10.16.1-alt0.p10.1ALT-PU-2023-4282-2323593Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
[oss-security] 20220402 Re: [PATCH AUTOSEL 5.15 13/16] vdpa: clean up get_config_size ret value handling
  • Mailing List
  • Patch
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20220513-0003/
  • Third Party Advisory
https://lore.kernel.org/netdev/20220123001216.2460383-13-sashal%40kernel.org/

      1. Configuration 1

        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        5.7
        End excliding
        5.10.88
        cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
        Start including
        5.11
        End excliding
        5.15.11

        Configuration 2

        cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

        Configuration 3

        cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

        Configuration 4

        cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

        Configuration 5

        cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

        Configuration 6

        cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

        Configuration 7

        cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

        Configuration 8

        cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

        Configuration 9

        cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.5.3
    Back to top