CVE-2022-25636 log
| Source |
|
| Severity | High |
| Remote | No |
| Type | Privilege escalation |
| Description | An out-of-bounds (OOB) memory access flaw was found in nft_fwd_dup_netdev_offload in net/netfilter/nf_dup_netdev.c in the netfilter subcomponent in the Linux kernel due to a heap out-of-bounds write problem. This flaw allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a privilege escalation threat. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2653 | linux | 5.4.0-1 | 5.16.12.arch1-1 | High | Fixed |
| References |
|---|
https://github.com/torvalds/linux/commit/b1a5983f56e371046dcf164f90bfaf704d2b89f6 https://www.openwall.com/lists/oss-security/2022/02/21/2 |