PT-2021-1526 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2021-05-06
·
Updated
2023-10-05
·
CVE-2022-0850
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
linux kernel (affected versions not specified)
Description
A vulnerability in the linux kernel allows for an information leak. This issue is related to the
ext4 extent header and can lead to the disclosure of protected information to userspace. Additionally, the copy page to iter() function is affected, which may also result in information disclosure or denial of service. The vulnerability can be exploited to reveal sensitive information or cause a service disruption. In the extents.c file, multiple functions contain a possible out of bounds read due to uninitialized data, potentially leading to local information disclosure without requiring additional execution privileges or user interaction.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Centos
Red Hat
Suse
Ubuntu
Linux Kernel