PT-2022-3882 · Linux · Linux Kernel

Published 2022-07-19 · Updated 2022-07-19

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the Linux kernel's pvpanic driver, located in /drivers/misc/pvpanic/pvpanic.c. Exploitation of this issue could allow an unprivileged attacker to cause a denial of service by executing a command with a specially crafted parameter, such as using the cat command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2022-04688

Affected Products

Linux Kernel

References · 5

• https://bdu.fstec.ru/vul/2022-04688 · Security Note
• https://github.com/torvalds/linux/commit/a99009bc4f2f0b46e6c553704fda0b67e04395f5 · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4 · Note
• https://madaidans-insecurities.github.io/guides/linux-hardening.html#restricting-sysfs · Note
• https://lore.kernel.org/all/[e-mail] · Note