CVE-2022-3170

HIGH

Linux Kernel - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0005
EPSS Percentile 14.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (1)
linux/linux_kernel 6.0 rc1 (3 CPE variants)
Published Sep 13, 2022
Tracked Since Feb 18, 2026