SB20250502156 - Out-of-bounds read in Linux kernel uapi linux
Published: May 2, 2025 Updated: May 10, 2025
Security Bulletin ID
SB20250502156
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2022-49870)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the include/uapi/linux/capability.h. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/151dc8087b5609e53b069c068e3f3ee100efa586
- https://git.kernel.org/stable/c/27bdb134c043ff32c459d98f16550d0ffa0b3c34
- https://git.kernel.org/stable/c/46653972e3ea64f79e7f8ae3aa41a4d3fdb70a13
- https://git.kernel.org/stable/c/5661f111a1616ac105ec8cec81bff99b60f847ac
- https://git.kernel.org/stable/c/5b79fa628e2ab789e629a83cd211ef9b4c1a593e
- https://git.kernel.org/stable/c/65b0bc7a0690861812ade523d19f82688ab819dc
- https://git.kernel.org/stable/c/dbaab08c8677d598244d21afb7818e44e1c5d826
- https://git.kernel.org/stable/c/fcbd2b336834bd24e1d9454ad5737856470c10d7
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.155