PT-2022-25950 · Kernel · Kernel

Published 2022-10-14 · Updated 2025-05-14 · CVE-2022-41577

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kernel (affected versions not specified)

Description The issue is related to the kernel server not verifying the length of the data transferred in the user space. This can lead to an out-of-bounds read in the kernel, affecting device confidentiality and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-41577

Affected Products

Kernel

References · 5

• https://consumer.huawei.com/en/support/bulletin/2022/10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41577 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41577 · Security Note
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697 · Vendor Advisory
• https://t.me/cvenotify/122126 · Telegram Post