Wind River Support Network

HomeDefectsLIN1019-8826

Fixed

LIN1019-8826 : Security Advisory - linux - CVE-2022-40768

Created: Sep 18, 2022 Updated: Nov 4, 2022

Resolved Date: Nov 4, 2022

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Kernel

Description

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

CREATE(Triage):(User=admin) CVE-2022-40768 (https://nvd.nist.gov/vuln/detail/CVE-2022-40768)

CVEs

CVE-2022-40768