Vulnerability CVE-2022-0854

Vulnerability Name:

CVE-2022-0854 (CCN-222424)

Assigned:

2022-03-07

Published:

2022-03-07

Updated:

2022-10-14

Summary:

A memory leak flaw was found in the Linux kernelâ€™s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.

CVSS v3 Severity:

5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

5.5 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-401

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2022-0854

Source: XF
Type: UNKNOWN
linux-kernel-cve20220854-info-disc(222424)

Source: CCN
Type: Linux Kernel GIT Repository
swiotlb: rework fix info leak with DMA_FROM_DEVICE

Source: MISC
Type: Exploit, Mailing List, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/dma/swiotlb.c?h=v5.17-rc8&id=aa6f8dcbab473f3a3c7454b74caa46d36cdc5d13

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update

Source: DEBIAN
Type: Third Party Advisory
DSA-5161

Source: DEBIAN
Type: Third Party Advisory
DSA-5173

Source: CCN
Type: IBM Security Bulletin 6854985 (Spectrum Copy Data Management)
Vulnerabilities in Linux Kernel and Golang Go might affect IBM Spectrum Copy Data Management

Source: CCN
Type: IBM Security Bulletin 6965816 (Spectrum Protect Plus)
Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus

Vulnerable Configuration:

Configuration 1:

cpe:/o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc6:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version <= 5.16)

OR cpe:/o:linux:linux_kernel:5.17:rc7:*:*:*:*:*:*

Configuration 2:

cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:enterprise_linux:8::nfv:*:*:*:*:*

Configuration RedHat 3:

cpe:/a:redhat:enterprise_linux:8::realtime:*:*:*:*:*

Configuration RedHat 4:

cpe:/a:redhat:enterprise_linux:8::crb:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:8::baseos:*:*:*:*:*

Configuration RedHat 7:

cpe:/a:redhat:enterprise_linux:9:*:*:*:*:*:*:*

Configuration RedHat 8:

cpe:/a:redhat:enterprise_linux:9::nfv:*:*:*:*:*

Configuration RedHat 9:

cpe:/a:redhat:enterprise_linux:9::realtime:*:*:*:*:*

Configuration RedHat 10:

cpe:/a:redhat:enterprise_linux:9::appstream:*:*:*:*:*

Configuration RedHat 11:

cpe:/a:redhat:enterprise_linux:9::crb:*:*:*:*:*

Configuration RedHat 12:

cpe:/o:redhat:enterprise_linux:9:*:*:*:*:*:*:*

Configuration RedHat 13:

cpe:/o:redhat:enterprise_linux:9::baseos:*:*:*:*:*

Configuration CCN 1:

cpe:/o:linux:linux_kernel:-:*:*:*:*:*:*:*

AND

cpe:/a:ibm:spectrum_protect_plus:10.1.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:spectrum_copy_data_management:2.2.0.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8029	P	kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:7539	P	kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:8090	P	reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:com.redhat.rhsa:def:20227933	P	RHSA-2022:7933: kernel-rt security and bug fix update (Moderate)	2022-11-15
oval:com.redhat.rhsa:def:20228267	P	RHSA-2022:8267: kernel security, bug fix, and enhancement update (Moderate)	2022-11-15
oval:com.redhat.rhsa:def:20227683	P	RHSA-2022:7683: kernel security, bug fix, and enhancement update (Moderate)	2022-11-08
oval:com.redhat.rhsa:def:20227444	P	RHSA-2022:7444: kernel-rt security and bug fix update (Moderate)	2022-11-08
oval:org.opensuse.security:def:42370	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:42269	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:102155	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:1595	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:42175	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:118437	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:119177	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118680	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119367	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118122	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118870	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119552	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:42174	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119060	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118644	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:1231	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101952	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:99471	P	(Important)	2022-04-13
oval:org.opensuse.security:def:1747	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:102349	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101586	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:42265	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:1299	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:99733	P	(Important)	2022-04-13
oval:org.opensuse.security:def:1797	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:855	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101835	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:100399	P	(Important)	2022-04-13
oval:org.opensuse.security:def:1157	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101891	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:42368	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:102305	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:100732	P	(Important)	2022-04-13
oval:org.opensuse.security:def:102121	P	Security update for the Linux Kernel (Important)	2022-04-12
oval:org.opensuse.security:def:1557	P	Security update for the Linux Kernel (Important)	2022-04-12

BACK