CVE-2022-50493: linux kernel from 5.3.17 (inclusive), before 5.4 (exclusive), from 5.4.4 (inclusive), before 5.15.86 (exclusive), from…

Affected technology

linux kernel · from 5.3.17 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.4 (inclusive), before 5.15.86 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.0.16 (exclusive)
linux

linux kernel · from 6.1 (inclusive), before 6.1.2 (exclusive)
linux

Linux · 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 to before 5f730e489e741c28fe6a5b3308e33c094462acb0, 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 to before d3871af13aa03fbbe7fbb812eaf140501229a72e, 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 to before cb4dff498468b62e8c520568559b3a9007e104d7, 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 to before 05382ed9142cf8a8a3fb662224477eecc415778b, 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 to before 68ad83188d782b2ecef2e41ac245d27e0710fe8e, 457173c8b43ecd3ac48c8ace8d4437a50f7ad77b, b7abcc7df5e131c0b4bf89cb2411c5301ee83d26, 5.3.17 to before 5.4, 5.4.4 to before 5.5
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: drivers/scsi/qla2xxx/qla_init.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.