CVE-2022-40768

Updated: 2022-12-23 22:11:07.14068

Description:

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2022-09-22 05:02:20
CentOS 8.4 ELS kernel 4.18.0-305.25.1 5.5 MEDIUM Ignored 2022-09-22 05:02:20
CentOS 8.5 ELS kernel 4.18.0-348.7.1 5.5 MEDIUM Ignored 2022-09-22 05:02:20
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2022-09-22 05:02:20
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2022-09-22 05:02:20
Ubuntu 16.04 ELS linux 4.4.0 5.5 MEDIUM Released CLSA-2022:1670261781 2022-12-05 13:04:19
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Released CLSA-2022:1670263674 2022-12-05 16:04:16

Statement

Will not fix: low score