CVE-2022-2639

Aliases:UBUNTU-CVE-2022-2639DEBIAN-CVE-2022-2639
Advisory lineage Upstream: 0 Downstream: 35
Modified
Published: 01 Sept 2022, 20:32
Last modified:03 Aug 2024, 00:46

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.92% LOW
1% probability -0.24%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

01 Sept 2022, 20:32
Published
Vulnerability first disclosed
03 Aug 2024, 00:46
Last Modified
Vulnerability information updated

Description

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVSS Metrics

  • v4.0•HIGH•Score: 7.3CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.92%• Percentile: 59%

Techniques & Countermeasures

  • CWE-192•Integer Coercion Error

    Integer coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.

  • CWE-681•Incorrect Conversion between Numeric Types

    When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Affected Systems

  • debian•linux

    < 5.10.113-1 | < 5.17.6-1 | < 5.17.6-1 | < 5.17.6-1

  • ubuntu•linux

    all | < 4.4.0-234.268 | < 4.15.0-189.200 | < 5.4.0-122.138 | < 5.15.0-41.44

  • ubuntu•linux-aws

    < 4.4.0-1113.119 | < 4.4.0-1151.166 | < 4.15.0-1137.148 | < 5.4.0-1081.88 | < 5.15.0-1015.19

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1081.88~18.04.1

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-fips

    < 4.15.0-2076.81 | all | < 5.4.0-1081.88+fips1

  • ubuntu•linux-aws-hwe

    < 4.15.0-1137.148~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1146.161~14.04.1 | < 4.15.0-1146.161~16.04.1 | all | < 5.4.0-1086.91 | < 5.15.0-1014.17

  • ubuntu•linux-azure-4.15

    < 4.15.0-1146.161

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1014.17~20.04.1

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1086.91~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fips

    < 4.15.0-2057.63 | all | < 5.4.0-1086.91+fips1

  • ubuntu•linux-bluefield

    all | < 5.4.0-1042.47

  • ubuntu•linux-dell300x

    < 4.15.0-1049.54

  • ubuntu•linux-fips

    < 4.4.0-1083.90 | all | < 4.15.0-1094.105 | < 5.4.0-1057.65

  • ubuntu•linux-gcp

    < 4.15.0-1131.147~16.04.1 | all | < 5.4.0-1084.92 | < 5.15.0-1013.18

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1131.147

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.15

    < 5.15.0-1013.18~20.04.1

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1084.92~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-fips

    < 4.15.0-2041.46 | all | < 5.4.0-1081.88+fips1

  • ubuntu•linux-gke

    < 5.4.0-1078.84 | < 5.15.0-1011.14

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.4

    all

  • ubuntu•linux-gkeop

    < 5.4.0-1049.52 | < 5.15.0-1002.4

  • ubuntu•linux-gkeop-5.4

    all

  • ubuntu•linux-hwe

    < 4.15.0-189.200~16.04.1 | all

  • ubuntu•linux-hwe-5.11

    all

  • ubuntu•linux-hwe-5.13

    all

  • ubuntu•linux-hwe-5.15

    < 5.15.0-41.44~20.04.1

  • ubuntu•linux-hwe-5.4

    < 5.4.0-122.138~18.04.1

  • ubuntu•linux-hwe-5.8

    all

  • ubuntu•linux-hwe-edge

    all | all

  • ubuntu•linux-ibm

    < 5.4.0-1029.33 | < 5.15.0-1010.12

  • ubuntu•linux-ibm-5.4

    < 5.4.0-1029.33~18.04.1

  • ubuntu•linux-intel-5.13

    all

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-intel-iotg

    < 5.15.0-1013.17

Showing first 50 affected entries in server-rendered view.

References (7)