CVE-2022-2078
בינונית 5.5
תיאור (מקור, אנגלית)
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
מדדים
- CVSS 3.1
-
5.5 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-19/10/2026
- CWE
- CWE-121, CWE-120
מוצרים מושפעים
linux: linux kernel; redhat: virtualization; redhat: enterprise linux; debian: debian linux
קישורים
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/… Mailing ListPatchVendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/… Mailing ListPatchVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2096178 Issue TrackingThird Party Advisory
- https://www.debian.org/security/2022/dsa-5161 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2096178 Issue TrackingThird Party Advisory
- https://www.debian.org/security/2022/dsa-5161 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html