Wind River Support Network

HomeDefectsLIN1022-1786

Fixed

LIN1022-1786 : Security Advisory - linux - CVE-2022-40768

Created: Sep 18, 2022 Updated: Nov 23, 2022

Resolved Date: Nov 1, 2022

Found In Version: 10.22.33.1

Fix Version: 10.22.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

CREATE(Triage):(User=admin) CVE-2022-40768 (https://nvd.nist.gov/vuln/detail/CVE-2022-40768)

CVEs

CVE-2022-40768