Vulnerability CVE-2022-2327

Vulnerability Name:

CVE-2022-2327 (CCN-232213)

Assigned:

2022-06-25

Published:

2022-06-25

Updated:

2023-02-03

Summary:

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

CVSS v2 Severity:

5.5 Medium (CCN CVSS v2 Vector: AV:L/AC:H/Au:S/C:C/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): None

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2022-2327

Source: XF
Type: UNKNOWN
linux-kernel-cve20222327-code-exec(232213)

Source: CCN
Type: Linux Kernel GIT Repository
io_uring: add missing item types for various requests

Source: cve-coordination@google.com
Type: Mailing List, Patch, Vendor Advisory
cve-coordination@google.com

Source: cve-coordination@google.com
Type: Patch, Third Party Advisory
cve-coordination@google.com

Source: cve-coordination@google.com
Type: UNKNOWN
cve-coordination@google.com

Vulnerable Configuration:

Configuration CCN 1:

cpe:/o:linux:linux_kernel:5.5:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.5.1:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.5.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.5.3:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.5.6:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.5.7:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.6.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.6.0:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.6.10:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.6.3:*:*:*:*:*:*:*