PT-2022-3211 · Linux+4 · Linux Kernel+4

Published 2022-03-18 · Updated 2023-08-14 · CVE-2022-1651

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak flaw was found in the Linux kernel in the acrn dev ioctl function in the drivers/virt/acrn/hsm.c file, related to how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2022-2050

ALT-PU-2022-2058

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10399

BDU:2022-03904

CVE-2022-1651

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

USN-5469-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 354

• https://nvd.nist.gov/vuln/detail/CVE-2022-1651 · Security Note
• https://ubuntu.com/security/CVE-2022-0168 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1263 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1353 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecd1735f14d6ac868ae5d8b7a2bf193fa11f388b · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1671 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2520-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1972 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-1651 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1966 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03904 · Security Note
• https://ubuntu.com/security/CVE-2022-28388 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28389 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-1651 · Security Note
• https://ubuntu.com/security/CVE-2022-28390 · Vendor Advisory