PT-2022-4595 · Linux+4 · Linux Kernel+4

Rohit Keshri · Published 2020-08-26 · Updated 2023-04-27 · CVE-2022-0812

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc rdma.c. This flaw allows an attacker with normal user privileges to leak kernel information. The issue is related to the exploitation of a component in the Linux Kernel, which may allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2020-2688

ALT-PU-2020-2716

ALT-PU-2020-2770

ALT-PU-2020-3210

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2022-05472

CVE-2022-0812

DLA-3065-1

DSA-5173-1

OPENSUSE-SU-2022_1256-1

OPENSUSE-SU-2022_1676-1

OPENSUSE-SU-2022_1687-1

SUSE-SU-2022:1196-1

SUSE-SU-2022:1255-1

SUSE-SU-2022:1256-1

SUSE-SU-2022:1266-1

SUSE-SU-2022:1267-1

SUSE-SU-2022:1402-1

SUSE-SU-2022:1669-1

SUSE-SU-2022:1676-1

SUSE-SU-2022:1687-1

SUSE-SU-2022_1669-1

SUSE-SU-2022_1676-1

SUSE-SU-2022_1687-1

USN-5669-1

USN-5669-2

USN-5678-1

USN-5679-1

USN-5684-1

USN-5687-1

USN-5695-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

Ubuntu

References · 211

• https://ubuntu.com/security/CVE-2022-33740 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1255-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33742 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1687-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2318 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5679-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0812 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5173-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0812 · Security Note
• https://ubuntu.com/security/CVE-2022-1012 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5695-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-26365 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0812 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33741 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32296 · Vendor Advisory