An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 30, 2022 |
| Suse | — | Upgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-devel-azure | Oct 26, 2022 | Mar 30, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.13Upgrade linux-azure-5.13Upgrade linux-hwe-5.13Upgrade linuxUpgrade linux-aws-5.13Upgrade linux-oracle-5.13Upgrade linux-oem-5.14 | Nov 19, 2024 | Mar 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub