CVE-2022-49990: linux kernel from 4.4.105 (inclusive), before 4.5 (exclusive), from 4.9.68 (inclusive), before 4.10 (exclusive), from…

Affected technology

linux kernel · from 4.4.105 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.9.68 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.5 (inclusive), before 4.19.257 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.212 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.140 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.64 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.19.6 (exclusive)
linux

linux kernel · 6.0 · update rc1
linux

linux kernel · 6.0 · update rc2
linux

Linux · 8d9047f8b967ce6181fd824ae922978e1b055cc0 to before 25a95303b9e513cd2978aacc385d06e6fec23d07, 8d9047f8b967ce6181fd824ae922978e1b055cc0 to before cacd522e6652fbc2dc0cc6ae11c4e30782fef14b, 8d9047f8b967ce6181fd824ae922978e1b055cc0 to before 297ae7e87a87a001dd3dfeac1cb26a42fd929708, 8d9047f8b967ce6181fd824ae922978e1b055cc0 to before 8195e065abf3df84eb0ad2987e76a40f21d1791c, 8d9047f8b967ce6181fd824ae922978e1b055cc0 to before fbdc482d43eda40a70de4b0155843d5472f6de62, 8d9047f8b967ce6181fd824ae922978e1b055cc0 to before 13cccafe0edcd03bf1c841de8ab8a1c8e34f77d9, 9e51ee1b76efc7b5e9404010793a39fde0e03cb7, 232b47b3c88af1da737cd7760f247c4ed58168cf, b8e212c599082896a180a18a0c9bd529526590be, 4.4.105 to before 4.5, 4.9.68 to before 4.10, 4.14.5 to before 4.15
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: arch/s390/kernel/process.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.