PT-2022-6558
CVE-2023-2007
·
تاريخ النشر
2022-04-01
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
The issue results from the lack of proper locking when performing operations on an object within the DPT I2O Controller driver. This can be leveraged by an attacker, in conjunction with other vulnerabilities, to escalate privileges and execute arbitrary code in the context of the kernel. The vulnerability is related to the
virt to bus() and bus to virt() functions of the dpt i2o driver in Linux operating systems.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾