Name: CVE-2022-0850: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2022-08-29T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-0850, CWE-200, CVSS 7.1, EPSS 0.00426

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.

CVSS Details

CVSS 3.1 Base Score: 7.1
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernelUpgrade kernel-rt	Sep 5, 2023	Aug 29, 2022
Debian	—	Upgrade linux	Jul 30, 2024	Aug 29, 2022
Huawei Euleros 2_0_sp10	—	Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel	Dec 22, 2022	Aug 29, 2022
Huawei Euleros 2_0_sp5	—	Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libs	Aug 18, 2022	Aug 17, 2022
Huawei Euleros 2_0_sp8	—	Upgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headers	Dec 9, 2022	Aug 29, 2022
Oracle_linux	—	Upgrade kernel-uek	Oct 5, 2022	May 6, 2021
Redhat_linux	—	No solution existsUpgrade kernel-rtUpgrade kernel	Sep 5, 2023	Aug 29, 2022
Suse	—	Upgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade dtb-zteUpgrade kernel-default-baseUpgrade kernel-debug-baseUpgrade dtb-alteraUpgrade dtb-caviumUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-debugUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-extraUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade kernel-vanillaUpgrade kernel-preempt-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kselftests-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-kgraftUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade reiserfs-kmp-preemptUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-vanilla-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kb	Oct 26, 2022	Aug 29, 2022
Ubuntu	—	Upgrade linux-image-4.4.0-1113-awsUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-awsUpgrade linux-image-virtual	Oct 1, 2022	Apr 12, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence