Wind River Support Network

HomeDefectsLIN1018-9753

Fixed

LIN1018-9753 : Security Advisory - linux - CVE-2022-40768

Created: Sep 18, 2022 Updated: Mar 23, 2023

Resolved Date: Jan 10, 2023

Found In Version: 10.18.44.1

Fix Version: 10.18.44.29

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Kernel

Description

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

CREATE(Triage):(User=admin) CVE-2022-40768 (https://nvd.nist.gov/vuln/detail/CVE-2022-40768)

CVEs

CVE-2022-40768