CVEvulnerability
CVE-2022-1651
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- Weaknesses
- CWE-401
Description
A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.
Affected configurations
• linux linux kernel (>= 5.12 < 5.15.33)
• linux linux kernel (>= 5.16 < 5.16.19)
• linux linux kernel (>= 5.17 < 5.17.2)
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecd1735f14d6ac868ae5d8b7a2bf193fa11f388b Mailing List, Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220901-0008/ Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecd1735f14d6ac868ae5d8b7a2bf193fa11f388b Mailing List, Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220901-0008/ Third Party Advisory