PT-2022-5932 · Linux+6 · Linux Kernel+6

Zheyu Ma · Published 2022-06-02 · Updated 2025-06-27 · CVE-2022-3077

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue was found in the Linux kernel's Intel iSMT SMBus host controller driver, specifically in how it handles the I2C SMBUS BLOCK PROC CALL case via the I2C SMBUS ioctl with malicious input data. This could allow a local user to crash the system, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALSA-2023:0300

ALSA-2023:0334

ALT-PU-2022-2497

ALT-PU-2022-2523

ALT-PU-2022-2679

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10923

BDU:2022-07354

CVE-2022-3077

RHSA-2023:0300

RHSA-2023:0334

RHSA-2023_0300

RHSA-2023_0334

RLSA-2023:0300

RLSA-2023:0334

RXSA-2023:0334

Affected Products

Alt Linux

Almalinux

Astra Linux

Linux Kernel

Red Hat

Red Os

Rocky Linux

References · 48

• https://github.com/torvalds/linux/commit/690b2549b19563ec5ad53e5c82f6a944d910086e · Patch
• https://osv.dev/vulnerability/RXSA-2023:0334 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-0334.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-0300.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2023:0300 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-3077 · Security Note
• https://linux.oracle.com/errata/ELSA-2023-0334.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07354 · Security Note
• https://osv.dev/vulnerability/RLSA-2023:0334 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0426SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3077 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3077 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:0334 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3077 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory