CVE-2022-36123

HIGH

Linux kernel <5.18.13 - DoS/Privilege Escalation

Title source: llm
STIX 2.1

Description

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

References (6)

Core 6
Core References
Exploit, Patch, Third Party Advisory x_refsource_misc
https://sick.codes/sick-2022-128
Exploit, Patch, Third Party Advisory x_refsource_misc
https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.md
Release Notes, Third Party Advisory x_refsource_confirm
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20220901-0003/

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 7.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (6)
linux/linux_kernel < 5.18.13
netapp/h300s_firmware
netapp/h410c_firmware
netapp/h410s_firmware
netapp/h500s_firmware
netapp/h700s_firmware
Published Jul 29, 2022
Tracked Since Feb 18, 2026