CVE-2022-0854

Published: Mar 23, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.

Vendor	Product	Versions
n/a	Kernel	affected `Linux kernel 5.17-rc8`

Weaknesses (CWE)

CWE-200

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/dma/swiotlb.c?h=v5.17-rc8&id=aa6f8dcbab473f3a3c7454b74caa46d36cdc5d13

x_refsource_MISC

DSA-5161

vendor-advisory

x_refsource_DEBIAN

[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update

mailing-list

x_refsource_MLIST

DSA-5173

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-0854

Description

Affected Products

Weaknesses (CWE)

References