CVEvulnerability
CVE-2022-2938
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side effects.
Affected configurations
• linux linux kernel (>= 5.2 < 5.4.177)
• linux linux kernel (>= 5.5 < 5.10.97)
• linux linux kernel (>= 5.11 < 5.15.19)
• linux linux kernel (>= 5.16 < 5.16.5)
• fedoraproject fedora 35
• redhat enterprise linux 8.0
• netapp h300s firmware
• netapp h500s firmware
• netapp h700s firmware
• netapp h410s firmware
• netapp h410c firmware
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a06247c6804f1a7c86a2e5398a4c1f1db1471848 Mailing List, Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20221223-0002/ Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a06247c6804f1a7c86a2e5398a4c1f1db1471848 Mailing List, Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20221223-0002/ Third Party Advisory