CVE-2022-4378

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4378.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "4.9.0"
            },
            {
                "last_affected": "4.9.337"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.14.0"
            },
            {
                "last_affected": "4.14.302"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.19.0"
            },
            {
                "last_affected": "4.19.269"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.4.0"
            },
            {
                "last_affected": "5.4.228"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.10.0"
            },
            {
                "last_affected": "5.10.162"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.15.0"
            },
            {
                "last_affected": "5.15.86"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "6.0.0"
            },
            {
                "last_affected": "6.0.11"
            }
        ]
    }
]