CVE-2022-0494

Name
CVE-2022-0494
Description
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://bugzilla.redhat.com/show_bug.cgi?id=2039448
MISC https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel@gmail.com/
Third Party Advisory https://www.debian.org/security/2022/dsa-5161
Mailing List https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
Third Party Advisory https://www.debian.org/security/2022/dsa-5173
https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel%40gmail.com/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= None < 5.17

Vulnerable and fixed packages

Source package Branch Version Maintainer Status