CVE-2022-0185

Aliases:UBUNTU-CVE-2022-0185DEBIAN-CVE-2022-0185
Advisory lineage Upstream: 0 Downstream: 35
Analyzed
Published: 11 Feb 2022, 17:40
Last modified:21 Oct 2025, 23:15

Vulnerability Summary

Overall Risk (default)
medium
49/100
CVSS Score
8.4 HIGH
v3.1 (cve.org)
EPSS Score
25.15% HIGH
25% probability +24.13%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

11 Feb 2022, 17:40
Published
Vulnerability first disclosed
21 Aug 2024, 00:00
Added to CISA KEV
Linux Kernel Heap-Based Buffer Overflow Vulnerability
11 Sept 2024, 00:00
CISA Remediation Due
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
21 Oct 2025, 23:15
Last Modified
Vulnerability information updated

Description

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

CVSS Metrics

  • v3.1•HIGH•Score: 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 25.15%• Percentile: 98%

Techniques & Countermeasures

  • CWE-190•Integer Overflow or Wraparound

    The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

  • CWE-191•Integer Underflow (Wrap or Wraparound)

    The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Affected Systems

  • debian•linux

    < 5.10.92-1 | < 5.15.15-1 | < 5.15.15-1 | < 5.15.15-1

  • ubuntu•linux

    < 5.4.0-96.109

  • ubuntu•linux-aws

    < 5.4.0-1063.66

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    < 5.11.0-1027.30~20.04.1

  • ubuntu•linux-aws-5.13

    < 5.13.0-1011.12~20.04.1

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1063.66~18.04.1

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-fips

    < 5.4.0-1069.73+fips2 | all

  • ubuntu•linux-azure

    all | < 5.4.0-1067.70

  • ubuntu•linux-azure-5.11

    < 5.11.0-1027.30~20.04.1

  • ubuntu•linux-azure-5.13

    < 5.13.0-1012.14~20.04.1

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1067.70~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fips

    < 5.4.0-1073.76+fips1 | all

  • ubuntu•linux-bluefield

    all | < 5.4.0-1025.28

  • ubuntu•linux-fips

    < 5.4.0-1040.46 | all

  • ubuntu•linux-gcp

    all | < 5.4.0-1062.66

  • ubuntu•linux-gcp-5.11

    < 5.11.0-1028.32~20.04.1

  • ubuntu•linux-gcp-5.13

    < 5.13.0-1012.15~20.04.1

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1062.66~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-fips

    < 5.4.0-1067.71~20.04.1 | all

  • ubuntu•linux-gke

    < 5.4.0-1059.62

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.4

    < 5.4.0-1059.62~18.04.1

  • ubuntu•linux-gkeop

    < 5.4.0-1031.32

  • ubuntu•linux-gkeop-5.4

    < 5.4.0-1031.32~18.04.1

  • ubuntu•linux-hwe

    all

  • ubuntu•linux-hwe-5.11

    all

  • ubuntu•linux-hwe-5.13

    < 5.13.0-27.29~20.04.1

  • ubuntu•linux-hwe-5.4

    < 5.4.0-96.109~18.04.1

  • ubuntu•linux-hwe-5.8

    all

  • ubuntu•linux-hwe-edge

    all | all

  • ubuntu•linux-ibm

    < 5.4.0-1012.13

  • ubuntu•linux-ibm-5.4

    < 5.4.0-1012.13~18.04.1

  • ubuntu•linux-intel-5.13

    < 5.13.0-1010.10

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 5.4.0-1053.55

  • ubuntu•linux-oem

    all

  • ubuntu•linux-oem-5.10

    < 5.10.0-1057.61

  • ubuntu•linux-oem-5.13

    < 5.13.0-1028.35

  • ubuntu•linux-oem-5.14

    < 5.14.0-1020.22

  • ubuntu•linux-oem-5.6

    all

  • ubuntu•linux-oracle

    < 5.4.0-1061.65

  • ubuntu•linux-oracle-5.0

    all

Showing first 50 affected entries in server-rendered view.

References (13)