CVEvulnerability

CVE-2022-0494

4.4 MEDIUM Published 2022-03-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200, CWE-908

Description

A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.

Affected configurations

• linux linux kernel (< 5.17) • linux linux kernel 5.17 • debian debian linux 9.0 • debian debian linux 10.0 • debian debian linux 11.0

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-908 Use of Uninitialized Resource weakness

References