Vulnerabilities CVE-2022-0185

CVE-2022-0185

Medium

Open

KEV

TLP:CLEAR

Linux Kernel Heap-Based Buffer Overflow Vulnerability

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Linux — Kernel — Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.

Details

EPSS Score ⓘ: 25.15%

97.7th percentile
Confidence: 100%
CISA KEV
Date Added: Aug 21, 2024
Patch Due: Sep 11, 2024
Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.