CVE-2022-25265

Updated: 2024-11-24 04:38:50.493384

Description:

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 4.4
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Already Fixed 2025-01-19 23:21:34
AlmaLinux 9.2 FIPS kernel 5.14.0 7.8 HIGH Already Fixed 2025-01-19 23:21:33
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Ignored 2023-06-07 03:35:01
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2024:1720468480 2024-07-23 17:33:30
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1690287378 2023-07-25 09:20:13
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1690294029 2023-07-25 11:16:05
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH Already Fixed 2024-10-14 03:41:00
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Ignored 2023-06-07 03:35:01
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH In Testing 2024-10-24 00:58:01
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Ignored 2023-06-07 03:35:01
Total: 13