Wind River Support Network

HomeDefectsLIN1021-4400

Fixed

LIN1021-4400 : Security Advisory - linux - CVE-2022-40768

Created: Sep 18, 2022 Updated: Dec 13, 2022

Resolved Date: Nov 1, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.15

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Kernel

Description

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

CREATE(Triage):(User=admin) CVE-2022-40768 (https://nvd.nist.gov/vuln/detail/CVE-2022-40768)

CVEs

CVE-2022-40768