CVE-2022-49948: linux kernel before 4.9.328 (exclusive), from 4.10 (inclusive), before 4.14.293 (exclusive), from 4.15 (inclusive)…

Affected technology

linux kernel · before 4.9.328 (exclusive)
linux

linux kernel · from 4.10 (inclusive), before 4.14.293 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.258 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.213 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.142 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.66 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.19.8 (exclusive)
linux

linux kernel · 6.0 · update rc1
linux

linux kernel · 6.0 · update rc2
linux

linux kernel · 6.0 · update rc3
linux

Linux · 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before c555cf04684fde39b5b0dd9fd80730030ee10c4a, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before e9ba4611ddf676194385506222cce7b0844e708e, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before f74b4a41c5d7c9522469917e3072e55d435efd9e, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 1cf1930369c9dc428d827b60260c53271bff3285, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 989201bb8c00b222235aff04e6200230d29dc7bb, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 2535431ae967ad17585513649625fea7db28d4db, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before c904fe03c4bd1f356a58797d39e2a5d0ca15cefc, 009e39ae44f4191188aeb6dfbf661b771dbbe515 to before 566f9c9f89337792070b5a6062dff448b3e7977f, e60f8fcce05042e8f8cea25ee81fecc1222114cf, 5812a9bc9d68a82c2cc839f88e6f7a05093ab39d, 863ad19fd654c485e3beec3575c4d74a1e74369e, dbc3fd44f957a39407e889287bf61fa0ef3ecc14, 0b2a0a58ad22f9d6dfc641bc5ec46057493f22a5, 9f2d48f0745f921040df91bfe8fa7f0339cd7497, 3425e397fb23cc2e8e6fb8f5b8226dcb447e84dd, eeae0a12a16650ff494d5faefa371cd9e7079575, 3.2.85 to before 3.3, 3.10.105 to before 3.11, 3.12.68 to before 3.13, 3.16.40 to before 3.17, 3.18.45 to before 3.19, 4.1.36 to before 4.2, 4.4.31 to before 4.5, 4.8.7 to before 4.9
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: drivers/tty/vt/vt.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.