Name: CVE-2022-0854: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2022-03-23T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-0854, CWE-200, CWE-401, CVSS 5.5, EPSS 0.00009

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debug-devel	Nov 14, 2022	Mar 23, 2022
Amazon Linux Ami 2	—	Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.281-212.502Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo	Jul 4, 2022	Mar 23, 2022
Amazon_linux	—	Upgrade kernel	Jun 10, 2022	Mar 23, 2022
Amazon_linux_2023	—	Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf	Feb 17, 2025	Mar 7, 2022
Centos_linux	—	Upgrade kernelUpgrade kernel-rt	Nov 9, 2022	Mar 23, 2022
Debian	—	Upgrade linux	Jul 4, 2022	Mar 23, 2022
Huawei Euleros 2_0_sp10	—	Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs	Aug 2, 2022	Mar 23, 2022
Huawei Euleros 2_0_sp5	—	Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs	Aug 18, 2022	Mar 23, 2022
Huawei Euleros 2_0_sp9	—	Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools	Jun 16, 2022	Mar 23, 2022
Oracle_linux	—	Upgrade kernel	Nov 16, 2022	Mar 7, 2022
Redhat_linux	—	Upgrade kernelUpgrade kernel-rtNo solution exists	Nov 9, 2022	Mar 23, 2022
Rocky_linux	—	Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-core	Mar 12, 2024	Mar 23, 2022
Suse	—	Upgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-extraUpgrade kselftests-kmp-preemptUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-azureUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade dlm-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dtb-xilinxUpgrade dtb-alUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade reiserfs-kmp-preemptUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-preemptUpgrade kernel-debugUpgrade ocfs2-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-preemptUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source	Oct 26, 2022	Mar 23, 2022
Ubuntu	—	Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-5.14.0-1033-oem	Apr 21, 2022	Mar 23, 2022
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Mar 23, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence