CVE-2022-0494

State: Published
Severity: Not scored
Published: Mar 25, 2022
Updated: Aug 2, 2024
Reserved: Feb 4, 2022

Description

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

Scores

The record has no CVSS score.

Weaknesses

CWE-200

Affected Products

Product	Versions
kerneln/a	kernel 5.17 rc5Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=2039448
https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel%40gmail.com/
DSA-5161vendor-advisory
[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security updatemailing-list
DSA-5173vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.