PT-2022-2278 · Linux+9 · Linux Kernel+9

Ali Haider · Published 2022-01-31 · Updated 2026-02-24 · CVE-2022-0854

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak flaw was found in the Linux kernel’s DMA subsystem, related to the way a user calls DMA FROM DEVICE. This issue allows a local user to read random memory from the kernel space, potentially leading to unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Information Disclosure

Weakness Enumeration

CWE-401

CWE-200

Related Identifiers

ALSA-2022:7444

ALSA-2022:7683

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2022-2278

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-9142

BDU:2022-02443

CESA-2022_7444

CESA-2022_7683

CVE-2022-0854

DLA-3065-1

DSA-5161-1

DSA-5173-1

OESA-2022-1604

OPENSUSE-SU-2022_1163-1

OPENSUSE-SU-2022_1183-1

OPENSUSE-SU-2024_3249-1

RHSA-2022:7444

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7444

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

RHSA-2024:0412

RLSA-2022:7444

RLSA-2022:7683

SUSE-SU-2022:1163-1

SUSE-SU-2022:1183-1

SUSE-SU-2022:1197-1

SUSE-SU-2022:1257-1

SUSE-SU-2022:1407-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:3249-1

SUSE-SU-2024:3499-1

SUSE-SU-2024_3499-1

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0369-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

USN-5381-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1762

• 🔥 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/dma/swiotlb.c?h=v5.17-rc8&id=aa6f8dcbab473f3a3c7454b74caa46d36cdc5d13 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:3499-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0494 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-26490 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1604 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-8267.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28356 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:7444 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0854 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-7933.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5381-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-27223 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7683.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26490 · Security Note