CVE-2022-50215: linux kernel before 4.9.326 (exclusive), from 4.10 (inclusive), before 4.14.291 (exclusive), from 4.15 (inclusive)…

Affected technology

linux kernel · before 4.9.326 (exclusive)
linux

linux kernel · from 4.10 (inclusive), before 4.14.291 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.256 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.211 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.137 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.61 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.18.18 (exclusive)
linux

linux kernel · from 5.19 (inclusive), before 5.19.2 (exclusive)
linux

Linux · c6517b7942fad663cc1cf3235cbe4207cf769332 to before bbc118acf7baf9e93c5e1314d14f481301af4d0f, c6517b7942fad663cc1cf3235cbe4207cf769332 to before f5e61d9b4a699dd16f32d5f39eb1cf98d84c92ed, c6517b7942fad663cc1cf3235cbe4207cf769332 to before ed9afd967cbfe7da2dc0d5e52c62a778dfe9f16b, c6517b7942fad663cc1cf3235cbe4207cf769332 to before f135c65085eed869d10e4e7923ce1015288618da, c6517b7942fad663cc1cf3235cbe4207cf769332 to before 408bfa1489a3cfe7150b81ab0b0df99b23dd5411, c6517b7942fad663cc1cf3235cbe4207cf769332 to before 8c004b7dbb340c1e5889f5fb9e5baa6f6e5303e8, c6517b7942fad663cc1cf3235cbe4207cf769332 to before 35e60ec39e862159cb92923eefd5230d4a873cb9, c6517b7942fad663cc1cf3235cbe4207cf769332 to before 03d8241112d5e3cccce1a01274a221099f07d2e1, c6517b7942fad663cc1cf3235cbe4207cf769332 to before 3455607fd7be10b449f5135c00dc306b85dc0d21, a0fe972f78eaaf352d593f9ed9079de590ceb286, b21c6d2897cd455fa396f4041a0c8165784e949f, 2.6.28.10 to before 2.6.29, 2.6.29.2 to before 2.6.30
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
File: drivers/scsi/sg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.