Wind River Support Network

HomeDefectsLINCD-8525

Fixed

LINCD-8525 : Security Advisory - linux - CVE-2022-26966

Created: Mar 12, 2022 Updated: Mar 31, 2022

Resolved Date: Mar 14, 2022

Found In Version: 10.20.6.0

Fix Version: 10.22.13.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Kernel

Description

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.

CREATE(Triage):(User=admin) CVE-2022-26966 (https://nvd.nist.gov/vuln/detail/CVE-2022-26966)

CVEs

CVE-2022-26966