CVE-2022-27666: debian debian_linux Out-of-bounds Write

Analyzed

AliasesSUSE-SU-2022:1182-1SUSE-SU-2022:1192-1SUSE-SU-2022:1215-1+14 more

Published 23-03-2022Last modified 03-08-2024

Vulnerability summary

CVE-2022-27666 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 5.52% chance of exploitation in the next 30 days, higher than 92.8% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

5.52%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

23-03-2022
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

CVSS metrics

6 scores · 4 sources · 3 versions

v4.07.3v3.17.8v2.04.6

EPSS trend

Probability

5.52%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.52% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat99 products

enterprise_linux8.0
virtualization4.0
bpftool< 0:4.18.0-147.67.1.el8_1
bpftool-debuginfo< 0:4.18.0-147.67.1.el8_1
kernel< 0:4.18.0-147.67.1.el8_1

kernel-abi-whitelists< 0:4.18.0-147.67.1.el8_1
kernel-core< 0:4.18.0-147.67.1.el8_1
kernel-debug< 0:4.18.0-147.67.1.el8_1
kernel-debug-core< 0:4.18.0-147.67.1.el8_1
kernel-debug-debuginfo< 0:4.18.0-147.67.1.el8_1
kernel-debug-devel< 0:4.18.0-147.67.1.el8_1
kernel-debug-modules< 0:4.18.0-147.67.1.el8_1
kernel-debug-modules-extra< 0:4.18.0-147.67.1.el8_1
kernel-debuginfo< 0:4.18.0-147.67.1.el8_1
kernel-debuginfo-common-ppc64le< 0:4.18.0-147.67.1.el8_1
kernel-debuginfo-common-x86_64< 0:4.18.0-147.67.1.el8_1
kernel-devel< 0:4.18.0-147.67.1.el8_1
kernel-doc< 0:4.18.0-147.67.1.el8_1
kernel-modules< 0:4.18.0-147.67.1.el8_1
kernel-modules-extra< 0:4.18.0-147.67.1.el8_1
kernel-tools< 0:4.18.0-147.67.1.el8_1
kernel-tools-debuginfo< 0:4.18.0-147.67.1.el8_1
kernel-tools-libs< 0:4.18.0-147.67.1.el8_1
kpatch-patch-4_18_0-147_51_1< 0:1-8.el8_1
kpatch-patch-4_18_0-147_51_1-debuginfo< 0:1-8.el8_1
kpatch-patch-4_18_0-147_51_1-debugsource< 0:1-8.el8_1
kpatch-patch-4_18_0-147_51_2< 0:1-7.el8_1
kpatch-patch-4_18_0-147_51_2-debuginfo< 0:1-7.el8_1
kpatch-patch-4_18_0-147_51_2-debugsource< 0:1-7.el8_1
kpatch-patch-4_18_0-147_52_1< 0:1-6.el8_1
kpatch-patch-4_18_0-147_52_1-debuginfo< 0:1-6.el8_1
kpatch-patch-4_18_0-147_52_1-debugsource< 0:1-6.el8_1
kpatch-patch-4_18_0-147_54_2< 0:1-5.el8_1
kpatch-patch-4_18_0-147_54_2-debuginfo< 0:1-5.el8_1
kpatch-patch-4_18_0-147_54_2-debugsource< 0:1-5.el8_1
kpatch-patch-4_18_0-147_56_1< 0:1-5.el8_1
kpatch-patch-4_18_0-147_56_1-debuginfo< 0:1-5.el8_1
kpatch-patch-4_18_0-147_56_1-debugsource< 0:1-5.el8_1
kpatch-patch-4_18_0-147_57_1< 0:1-4.el8_1
kpatch-patch-4_18_0-147_57_1-debuginfo< 0:1-4.el8_1
kpatch-patch-4_18_0-147_57_1-debugsource< 0:1-4.el8_1
kpatch-patch-4_18_0-147_58_1< 0:1-3.el8_1
kpatch-patch-4_18_0-147_58_1-debuginfo< 0:1-3.el8_1
kpatch-patch-4_18_0-147_58_1-debugsource< 0:1-3.el8_1
kpatch-patch-4_18_0-147_59_1< 0:1-3.el8_1
kpatch-patch-4_18_0-147_59_1-debuginfo< 0:1-3.el8_1
kpatch-patch-4_18_0-147_59_1-debugsource< 0:1-3.el8_1
kpatch-patch-4_18_0-147_64_1< 0:1-2.el8_1
kpatch-patch-4_18_0-147_64_1-debuginfo< 0:1-2.el8_1
kpatch-patch-4_18_0-147_64_1-debugsource< 0:1-2.el8_1
kpatch-patch-4_18_0-147_65_1< 0:1-1.el8_1
kpatch-patch-4_18_0-147_65_1-debuginfo< 0:1-1.el8_1
kpatch-patch-4_18_0-147_65_1-debugsource< 0:1-1.el8_1
kpatch-patch-4_18_0-305_10_2< 0:1-10.el8_4
kpatch-patch-4_18_0-305_10_2-debuginfo< 0:1-10.el8_4
kpatch-patch-4_18_0-305_10_2-debugsource< 0:1-10.el8_4
kpatch-patch-4_18_0-305_12_1< 0:1-9.el8_4
kpatch-patch-4_18_0-305_12_1-debuginfo< 0:1-9.el8_4
kpatch-patch-4_18_0-305_12_1-debugsource< 0:1-9.el8_4
kpatch-patch-4_18_0-305_17_1< 0:1-8.el8_4
kpatch-patch-4_18_0-305_17_1-debuginfo< 0:1-8.el8_4
kpatch-patch-4_18_0-305_17_1-debugsource< 0:1-8.el8_4
kpatch-patch-4_18_0-305_19_1< 0:1-8.el8_4
kpatch-patch-4_18_0-305_19_1-debuginfo< 0:1-8.el8_4
kpatch-patch-4_18_0-305_19_1-debugsource< 0:1-8.el8_4
kpatch-patch-4_18_0-305_25_1< 0:1-7.el8_4
kpatch-patch-4_18_0-305_25_1-debuginfo< 0:1-7.el8_4
kpatch-patch-4_18_0-305_25_1-debugsource< 0:1-7.el8_4
kpatch-patch-4_18_0-305_28_1< 0:1-5.el8_4
kpatch-patch-4_18_0-305_28_1-debuginfo< 0:1-5.el8_4
kpatch-patch-4_18_0-305_28_1-debugsource< 0:1-5.el8_4
kpatch-patch-4_18_0-305_3_1< 0:1-12.el8_4
kpatch-patch-4_18_0-305_3_1-debuginfo< 0:1-12.el8_4
kpatch-patch-4_18_0-305_3_1-debugsource< 0:1-12.el8_4
kpatch-patch-4_18_0-305_30_1< 0:1-5.el8_4
kpatch-patch-4_18_0-305_30_1-debuginfo< 0:1-5.el8_4
kpatch-patch-4_18_0-305_30_1-debugsource< 0:1-5.el8_4
kpatch-patch-4_18_0-305_34_2< 0:1-3.el8_4
kpatch-patch-4_18_0-305_34_2-debuginfo< 0:1-3.el8_4
kpatch-patch-4_18_0-305_34_2-debugsource< 0:1-3.el8_4
kpatch-patch-4_18_0-305_40_1< 0:1-2.el8_4
kpatch-patch-4_18_0-305_40_1-debuginfo< 0:1-2.el8_4
kpatch-patch-4_18_0-305_40_1-debugsource< 0:1-2.el8_4
kpatch-patch-4_18_0-305_40_2< 0:1-2.el8_4
kpatch-patch-4_18_0-305_40_2-debuginfo< 0:1-2.el8_4
kpatch-patch-4_18_0-305_40_2-debugsource< 0:1-2.el8_4
kpatch-patch-4_18_0-305_45_1< 0:1-1.el8_4
kpatch-patch-4_18_0-305_45_1-debuginfo< 0:1-1.el8_4
kpatch-patch-4_18_0-305_45_1-debugsource< 0:1-1.el8_4
kpatch-patch-4_18_0-305_7_1< 0:1-11.el8_4
kpatch-patch-4_18_0-305_7_1-debuginfo< 0:1-11.el8_4
kpatch-patch-4_18_0-305_7_1-debugsource< 0:1-11.el8_4
kpatch-patch-4_18_0-372_9_1< 0:1-1.el8
kpatch-patch-4_18_0-372_9_1-debuginfo< 0:1-1.el8
kpatch-patch-4_18_0-372_9_1-debugsource< 0:1-1.el8
perf< 0:4.18.0-147.67.1.el8_1
perf-debuginfo< 0:4.18.0-147.67.1.el8_1
python3-perf< 0:4.18.0-147.67.1.el8_1
python3-perf-debuginfo< 0:4.18.0-147.67.1.el8_1

Show all 99

Ubuntu69 products

linux< 5.4.0-107.121 | < 4.15.0-175.184
linux-aws< 5.4.0-1071.76 | < 4.15.0-1126.135
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)
linux-aws-5.13< 5.13.0-1021.23~20.04.2

linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1071.76~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-fips< 4.15.0-2065.68 | All versions (No fix recorded) | < 5.4.0-1071.76+fips1
linux-aws-hwe< 4.15.0-1126.135~16.04.2
linux-azureAll versions (No fix recorded) | < 5.4.0-1074.77 | < 4.15.0-1136.149~14.04.1 | < 4.15.0-1136.149~16.04.1
linux-azure-4.15< 4.15.0-1136.149
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13< 5.13.0-1021.24~20.04.1
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1074.77~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fips< 4.15.0-2047.51 | All versions (No fix recorded) | < 5.4.0-1074.77+fips1
linux-bluefield< 5.4.0-1032.35
linux-dell300x< 4.15.0-1040.45
linux-fips< 4.15.0-1083.92 | All versions (No fix recorded) | < 5.4.0-1047.53
linux-gcpAll versions (No fix recorded) | < 5.4.0-1069.73 | < 4.15.0-1120.134~16.04.1
linux-gcp-4.15< 4.15.0-1120.134
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13< 5.13.0-1023.28~20.04.1
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1069.73~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-fips< 4.15.0-2030.33 | All versions (No fix recorded) | < 5.4.0-1069.73+fips2
linux-gke< 5.4.0-1067.70
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.4< 5.4.0-1067.70~18.04.1
linux-gkeop< 5.4.0-1038.39
linux-gkeop-5.4< 5.4.0-1038.39~18.04.1
linux-hweAll versions (No fix recorded) | < 4.15.0-175.184~16.04.1
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13< 5.13.0-39.44~20.04.1
linux-hwe-5.4< 5.4.0-107.121~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1019.21
linux-ibm-5.4< 5.4.0-1019.21~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded)
linux-intel-iotg-5.15< 5.15.0-1008.11~20.04.1
linux-iot< 5.4.0-1004.6
linux-kvm< 5.4.0-1061.64 | < 4.15.0-1112.115
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14< 5.14.0-1031.34
linux-oem-5.6All versions (No fix recorded)
linux-oracle< 5.4.0-1069.75 | < 4.15.0-1091.100~16.04.1 | < 4.15.0-1091.100
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13< 5.13.0-1025.30~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1069.75~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.4.0-1058.65
linux-raspi-5.4< 5.4.0-1058.65~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded) | < 4.15.0-1107.114
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1007.7
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-snapdragon< 4.15.0-1125.134

Show all 69

Suse13 products

kernel-livepatch-SLE15_Update_24&distro=SUSE Linux Enterprise Live Patching 15< 14-150000.2.1
kernel-livepatch-SLE15_Update_25&distro=SUSE Linux Enterprise Live Patching 15< 11-150000.2.1
kernel-livepatch-SLE15_Update_26&distro=SUSE Linux Enterprise Live Patching 15< 6-150000.2.1
kernel-livepatch-SLE15_Update_27&distro=SUSE Linux Enterprise Live Patching 15< 3-150000.2.1
kernel-livepatch-SLE15_Update_28&distro=SUSE Linux Enterprise Live Patching 15< 2-150000.2.1

Show all 13

Netapp8 products

Show all 8

Debian2 products

linux< 5.16.18-1
debian_linuxEOL9.0 | 10.0 | 11.0

Fedoraproject1 product

fedoraEOL34 | 35

Linux1 product

linux_kernel≥ 4.11, < 4.14.274 | ≥ 4.15, < 4.19.237 | ≥ 4.20, < 5.4.188 | ≥ 5.5, < 5.10.108 | ≥ 5.11, < 5.15.29 | ≥ 5.16, < 5.16.15 | 5.17:rc1 | 5.17:rc2 | 5.17:rc3 | 5.17:rc4 | 5.17:rc5 | 5.17:rc6 | 5.17:rc7

7 vendors · 193 products