March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – Multiple Apache Log4j Vulnerabilities
January 19, 2022
Rewterz Threat Advisory – Windows emergency out-of-band (OOB) updates for Win Server
January 19, 2022
Rewterz Threat Advisory – Multiple Apache Log4j Vulnerabilities
January 19, 2022
Rewterz Threat Advisory – Windows emergency out-of-band (OOB) updates for Win Server
January 19, 2022
Severity
High
Analysis Summary
CVE-2022-0185
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a heap-based buffer overflow in the legacy_parse_param function in fs_context.c. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges as root to execute arbitrary code on the system.
Impact
- Privilege Escalation
Affected Vendors
Linux
Affected Products
- Linux Kernel 5.1
- Linux Kernel 5.2
- Linux Kernel 5.3
- Linux Kernel 5.4
Remediation
Refer to Linux Kernel Advisory for patch, upgrade, or suggested workaround information.