CVE-2022-49979: linux kernel before 5.10.141 (exclusive), from 5.11 (inclusive), before 5.15.65 (exclusive), from 5.16 (inclusive)…

Affected technology

linux kernel · before 5.10.141 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.65 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.19.7 (exclusive)
linux

Linux · 0ef6049f664941bc0f75828b3a61877635048b27 to before a5d1cb908131e939bd8b63b8e5e23365bbc2edaf, 341adeec9adad0874f29a0a1af35638207352a39 to before 86026be8535c16fcc5e4f960286faf04d7f77815, 341adeec9adad0874f29a0a1af35638207352a39 to before 2a0133723f9ebeb751cfce19f74ec07e108bef1f, 504078fbe9dd570d685361b57784a6050bc40aaa, 5.15.22 to before 5.15.65, 5.16.8 to before 5.17
Linux

Linux · 5.17
Linux

Component: Not specified by the source
File: include/linux/skmsg.h, include/net/sock.h, net/core/skmsg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.