CVE-2022-36123

Updated: 2025-08-20 00:29:24.65035

Description:

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2024:1712570434 2024-04-08 10:44:05
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-11-30 02:18:01
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2023-11-02 14:11:54
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2022-11-30 02:18:00
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2022-11-30 02:18:00
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-11-30 02:18:00
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-11-30 02:18:00
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Not Vulnerable 2022-11-30 02:17:05
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Not Vulnerable 2022-11-30 02:18:01
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Not Vulnerable 2023-08-28 21:18:40