PoC Index

CVE-2022-2639

HIGH 7.8EPSS 0.9%

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.92% chance of exploitation in the next 30 days, 58th percentile
Published
2022-09-01
Updated
2024-08-03

Proof-of-concept exploits (3)

References

Related