Vulnerability Name:

CVE-2022-0617 (CCN-219776)

Assigned:2022-01-24
Published:2022-01-24
Updated:2022-05-11
Summary:A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
4.7 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.1 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): High
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-476
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2022-0617

Source: MLIST
Type: Patch, Third Party Advisory
[oss-security] 20220413 CVE-2022-0617: udf:A null-ptr-deref bug be triggered when write to an ICB inode

Source: XF
Type: UNKNOWN
linux-kernel-cve20220617-dos(219776)

Source: CCN
Type: Linux Kernel GIT Repository
udf: Fix NULL ptr deref when converting from inline format

Source: MISC
Type: Exploit, Patch, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee

Source: MISC
Type: Patch, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update

Source: MISC
Type: Exploit, Vendor Advisory
https://lore.kernel.org/lkml/20220114172329.ygzry5rlz64ua2nr@quack3.lan/T/

Source: DEBIAN
Type: Third Party Advisory
DSA-5095

Source: DEBIAN
Type: Third Party Advisory
DSA-5096

Vulnerable Configuration:Configuration 1:
  • cpe:/o:linux:linux_kernel:4.2.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc8:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.2:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version >= 4.2.1 and < 5.17)
  • OR cpe:/o:linux:linux_kernel:5.17:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:11.0:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/a:redhat:enterprise_linux:8::nfv:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/a:redhat:enterprise_linux:8::realtime:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/a:redhat:enterprise_linux:8::crb:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:8:*:*:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:8::baseos:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/a:redhat:enterprise_linux:9:*:*:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/a:redhat:enterprise_linux:9::nfv:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/a:redhat:enterprise_linux:9::realtime:*:*:*:*:*

    • Configuration RedHat 10:
  • cpe:/a:redhat:enterprise_linux:9::appstream:*:*:*:*:*

    • Configuration RedHat 11:
  • cpe:/a:redhat:enterprise_linux:9::crb:*:*:*:*:*

    • Configuration RedHat 12:
  • cpe:/o:redhat:enterprise_linux:9:*:*:*:*:*:*:*

    • Configuration RedHat 13:
  • cpe:/o:redhat:enterprise_linux:9::baseos:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:linux:linux_kernel:4.2:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.3:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.4.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.5:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.7.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.9:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.10:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.8.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.11:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.12:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.13.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.15:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.14:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.16:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.17:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.18:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.19:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.20:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.0:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:4.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.1:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.2:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.3:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.4:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.5:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.6.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.7.0:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.8:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.9:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.10:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.11:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.12:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.13:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.14:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.15:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:5.16:-:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:8029
    P
    		kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-20
    oval:org.opensuse.security:def:7539
    P
    		kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:8090
    P
    		reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-12
    oval:com.redhat.rhsa:def:20227933
    P
    		RHSA-2022:7933: kernel-rt security and bug fix update (Moderate)
    2022-11-15
    oval:com.redhat.rhsa:def:20228267
    P
    		RHSA-2022:8267: kernel security, bug fix, and enhancement update (Moderate)
    2022-11-15
    oval:com.redhat.rhsa:def:20227444
    P
    		RHSA-2022:7444: kernel-rt security and bug fix update (Moderate)
    2022-11-08
    oval:com.redhat.rhsa:def:20227683
    P
    		RHSA-2022:7683: kernel security, bug fix, and enhancement update (Moderate)
    2022-11-08
    oval:org.opensuse.security:def:3753
    P
    		Security update for the Linux Kernel (Important)
    2022-08-01
    oval:org.opensuse.security:def:95383
    P
    		Security update for the Linux Kernel (Important)
    2022-08-01
    oval:org.opensuse.security:def:627
    P
    		Security update for the Linux Kernel (Important)
    2022-08-01
    oval:org.opensuse.security:def:95416
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:94263
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3726
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95350
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93630
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3643
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95427
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:94472
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:93159
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:95356
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93837
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:589
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:3705
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95273
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93319
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3783
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:94051
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3720
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:95335
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:93477
    P
    		 (Important)
    2022-07-21
    oval:org.opensuse.security:def:3794
    P
    		Security update for the Linux Kernel (Important)
    2022-07-21
    oval:org.opensuse.security:def:42175
    P
    		Security update for the Linux Kernel (Important)
    2022-04-19
    oval:org.opensuse.security:def:118437
    P
    		Security update for the Linux Kernel (Important)
    2022-04-19
    oval:org.opensuse.security:def:6183
    P
    		Security update for the Linux Kernel (Important)
    2022-04-07
    oval:org.opensuse.security:def:1795
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:843
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101828
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:99193
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:42255
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:1555
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102154
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:100390
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1150
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101889
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:99463
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1594
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102304
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:100723
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1229
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101951
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:99725
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:1746
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102347
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:101574
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:42254
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:1298
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:102119
    P
    		Security update for the Linux Kernel (Important)
    2022-03-30
    oval:org.opensuse.security:def:100056
    P
    		 (Important)
    2022-03-30
    oval:org.opensuse.security:def:6184
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:4741
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:6361
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:5361
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:4306
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:4702
    P
    		Security update for the Linux Kernel (Important)
    2022-03-09
    oval:org.opensuse.security:def:125121
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:118660
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:127373
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119331
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:125406
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:118836
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:42209
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119514
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:118267
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:125812
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119026
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119699
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:126975
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    oval:org.opensuse.security:def:119137
    P
    		Security update for the Linux Kernel (Important)
    2022-03-08
    BACK
    linux linux kernel 4.2.0
    linux linux kernel 4.2 rc8
    linux linux kernel 4.2 rc7
    linux linux kernel 4.2 rc6
    linux linux kernel 4.2 rc5
    linux linux kernel 4.2 rc4
    linux linux kernel 4.2 rc3
    linux linux kernel 4.2 rc2
    linux linux kernel 4.2 rc1
    linux linux kernel 5.17 rc1
    linux linux kernel *
    linux linux kernel 5.17 -
    linux linux kernel 5.17 rc2
    debian debian linux 9.0
    debian debian linux 10.0
    debian debian linux 11.0
    linux linux kernel 4.2
    linux linux kernel 4.3
    linux linux kernel 4.4.0
    linux linux kernel 4.5
    linux linux kernel 4.6
    linux linux kernel 4.7.0
    linux linux kernel 4.9
    linux linux kernel 4.10
    linux linux kernel 4.8.0
    linux linux kernel 4.11
    linux linux kernel 4.12
    linux linux kernel 4.13.0
    linux linux kernel 4.15
    linux linux kernel 4.14
    linux linux kernel 4.16
    linux linux kernel 4.17
    linux linux kernel 4.18
    linux linux kernel 4.19
    linux linux kernel 4.20
    linux linux kernel 5.0
    linux linux kernel 4.4
    linux linux kernel 5.1
    linux linux kernel 5.2
    linux linux kernel 5.3
    linux linux kernel 5.4
    linux linux kernel 5.5
    linux linux kernel 5.6.0
    linux linux kernel 5.7.0
    linux linux kernel 5.8.0 -
    linux linux kernel 5.9 rc1
    linux linux kernel 5.10 -
    linux linux kernel 5.11
    linux linux kernel 5.12 -
    linux linux kernel 5.13 -
    linux linux kernel 5.14 -
    linux linux kernel 5.15 -
    linux linux kernel 5.16 -