CVE-2022-49149: linux kernel 4.15; +1 more affected products

Affected technology

linux kernel · from 4.15.1 (inclusive), before 5.10.110 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.33 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.16.19 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 5.17.2 (exclusive)
linux

linux kernel · 4.15
linux

linux kernel · 4.15 · update rc2
linux

linux kernel · 4.15 · update rc3
linux

linux kernel · 4.15 · update rc4
linux

linux kernel · 4.15 · update rc5
linux

linux kernel · 4.15 · update rc6
linux

linux kernel · 4.15 · update rc7
linux

linux kernel · 4.15 · update rc8
linux

linux kernel · 4.15 · update rc9
linux

Linux · a158bdd3247b9656df36ba133235fff702e9fdc3 to before 051360e51341cd17738d82c15a8226010c7cb7f6, a158bdd3247b9656df36ba133235fff702e9fdc3 to before 8cbf4ae7a2833767d63114573e5f9a45740cc975, a158bdd3247b9656df36ba133235fff702e9fdc3 to before 54df5a37f1d951ed27fd47bf9b15a42279582110, a158bdd3247b9656df36ba133235fff702e9fdc3 to before 5e3c11144e557a9dbf9a2f6abe444689ef9d8aae, a158bdd3247b9656df36ba133235fff702e9fdc3 to before 4a7f62f91933c8ae5308f9127fd8ea48188b6bc3
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: include/trace/events/rxrpc.h, net/rxrpc/ar-internal.h, net/rxrpc/call_event.c, net/rxrpc/call_object.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.