CVE-2022-0185: Linux Kernel: aktif olarak istismar edilen açık

Açıklama (NVD)

Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.

Özet bilgiler

EPSS

%25,15 (yüzdelik 98)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2024-08-21 · Son tarih: 2024-09-11

Gerekli aksiyon: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu