CVE-2022-2078: A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() ,…

Description

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 64% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

KE

Kernel · Linux

kernel 5.19 rc1 · source: vendor, NVD

DL

Debian Linux · Debian

11.0 · source: NVD

EL

Enterprise Linux · Redhat

8.0; 9.0 · source: NVD

VI

Virtualization · Redhat

4.0 · source: NVD

SS

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens

before V1.1 · source: CISA