CVE-2022-4378

CVSS V2 None CVSS V3 None
Description
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Overview
  • CVE ID
  • CVE-2022-4378
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-01-05T16:15:11
  • Last Modified Date
  • 2023-03-08T18:15:11
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 4.9.0 4.9.337
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 4.14.0 4.14.302
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 4.19.0 4.19.269
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 5.4.0 5.4.228
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 5.10.0 5.10.162
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 5.15.0 5.15.86
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 6.0.0 6.0.11
History
Created Old Value New Value Data Type Notes
2023-01-05 16:20:36 Added to TrackCVE
2023-01-05 16:20:37 Weakness Enumeration new
2023-01-10 15:16:58 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-12 05:16:00 2023-01-11T20:47:29 CVE Modified Date updated
2023-01-12 05:16:00 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-12 05:16:02 Weakness Enumeration update
2023-01-12 05:16:04 CPE Information updated
2023-03-08 19:18:41 2023-03-08T18:15:11 CVE Modified Date updated
2023-03-08 19:18:41 Analyzed Modified Vulnerability Status updated
2023-03-08 19:18:42 References updated