Google LLC Fuchsia Kernel vulnerabilities

2 vulnerabilities

Known vulnerabilities in Google LLC Fuchsia Kernel, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-22556google llcfuchsia kernel+1
EPSS score
0.16%
The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond.5.5CVE-2022-0882google llcfuchsia kernel+1
EPSS score
0.12%
A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.