CVE-2022-2873

Updated: 2025-08-20 00:11:21.070129

Description:

An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-21 04:12:13 Ignored due to low severity
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2022-08-25 05:02:13 Ignored due to low severity
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2023-09-19 05:07:40 Ignored due to low severity
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1686585068 2023-06-13 09:10:17
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1686651204 2023-06-13 09:10:18
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2022-08-25 05:02:13 Ignored due to low severity
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2022-08-25 05:02:13 Ignored due to low severity
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Ignored 2022-09-28 05:02:37 Ignored due to low severity
Ubuntu 16.04 ELS linux 4.4.0 5.5 MEDIUM Ignored 2022-08-25 05:02:14 Ignored due to low severity
Ubuntu 18.04 ELS linux 4.15.0 5.5 MEDIUM Ignored 2023-03-02 04:04:01 Ignored due to low severity