Acknowledged
Created: Aug 22, 2023
Updated: Aug 25, 2023
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS.
CREATE(Triage):(User=admin) CVE-2022-36648 (https://nvd.nist.gov/vuln/detail/CVE-2022-36648)
