摘要:
A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.
安全等级: Low
公告ID: KylinSec-SA-2022-1391
发布日期: 2022年4月29日
关联CVE: CVE-2022-0168
A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-0168 | KY3.4-4A | kernel | Unaffected |
| CVE-2022-0168 | KY3.4-5 | kernel | Unaffected |
| CVE-2022-0168 | KY3.5.1 | kernel | Unaffected |
