Wind River Support Network

HomeDefectsLIN1021-3050

Fixed

LIN1021-3050 : Security Advisory - linux - CVE-2022-26966

Created: Mar 12, 2022 Updated: Mar 20, 2022

Resolved Date: Mar 14, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.11

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Kernel

Description

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.

CREATE(Triage):(User=admin) CVE-2022-26966 (https://nvd.nist.gov/vuln/detail/CVE-2022-26966)

CVEs

CVE-2022-26966