An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 30, 2022 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-azure | Oct 26, 2022 | Mar 30, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.13Upgrade linux-azure-5.13Upgrade linux-hwe-5.13Upgrade linux-aws-5.13Upgrade linux-oracle-5.13Upgrade linuxUpgrade linux-oem-5.14 | Nov 19, 2024 | Mar 30, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub