← back
CVE-2022-0494

CVE-2022-0494

EPSS 0.4%CWE-200
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
Affected products
n/a · kernel

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.redhat.com/show_bug.cgi?id=2039448https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlhttps://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel%40gmail.com/https://www.debian.org/security/2022/dsa-5161https://www.debian.org/security/2022/dsa-5173