7.8
CVSSv3

CVE-2022-3170

Published: 13/09/2022 Updated: 08/12/2022
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 6.0

Vendor Advisories

An out-of-bounds access issue was found in the Linux kernel sound subsystem It could occur when the 'id->name' provided by the user did not end with '\0' A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the systemAn out-of-bounds access i ...