4.6
CVSSv2

CVE-2022-26490

Published: 06/03/2022 Updated: 07/11/2023
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel up to and including 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

fedoraproject fedora 34

fedoraproject fedora 35

netapp h300s_firmware -

netapp h500s_firmware -

netapp h700s_firmware -

netapp h300e_firmware -

netapp h500e_firmware -

netapp h700e_firmware -

netapp h410s_firmware -

netapp h410c_firmware -

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2021-4197 Eric Biederman reported that incorrect permission checks in the cgroup process migration implementation can allow a local attacker to escalate privileges CVE-2022-0494 The ...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2021-4197 Eric Biederman reported that incorrect permission checks in the cgroup process migration implementation can allow a local attacker to escalate privileges CVE-2022-0168 A NU ...
A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality This flaw allows a local user to crash or escalate their privileges on the system (CVE-2022-26490) A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4c and net/ipv6/esp6c This flaw allows a local attacker with a normal user pri ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
st21nfca_connectivity_event_received in drivers/nfc/st21nfca/sec in the Linux kernel through 51612 has EVT_TRANSACTION buffer overflows because of untrusted length parameters ...
st21nfca_connectivity_event_received in drivers/nfc/st21nfca/sec in the Linux kernel through 51612 has EVT_TRANSACTION buffer overflows because of untrusted length parameters ...
A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality This flaw allows a local user to crash or escalate their privileges on the system (CVE-2022-26490) A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4c and net/ipv6/esp6c This flaw allows a local attacker with a normal user pri ...
A use-after-free flaw was found in the Linux kernel's sound subsystem in the way a user triggers concurrent calls of PCM hw_params The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls This flaw allows a local user to crash or potentially escalate their privileges on the system (CVE-2022-1048) A buffer overflow fl ...
A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality This flaw allows a local user to crash or escalate their privileges on the system (CVE-2022-26490) A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4c and net/ipv6/esp6c This flaw allows a local attacker with a normal user pri ...