Vulnerability CVE-2022-0480: Information

Description

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-0480
Published: Aug. 29, 2022
Modified: March 3, 2023
Error type identifier: CWE-770

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-mpsisyphus5.15.4-alt16.8.12-alt1ALT-PU-2021-3330-1290389Fixed
kernel-image-mpp106.1.19-alt16.1.19-alt1ALT-PU-2023-4894-3327092Fixed
kernel-image-mpp115.15.4-alt16.8.8-alt1ALT-PU-2021-3330-1290389Fixed
kernel-image-rpi-defsisyphus5.15.25-alt15.15.92-alt2ALT-PU-2022-1419-1296090Fixed
kernel-image-rpi-defp105.15.25-alt15.15.92-alt2ALT-PU-2022-1421-1296181Fixed
kernel-image-rpi-defp115.15.25-alt15.15.92-alt2ALT-PU-2022-1419-1296090Fixed
kernel-image-rpi-unsisyphus5.15.6-alt16.6.23-alt1ALT-PU-2021-3563-1292137Fixed
kernel-image-rpi-unp105.15.6-alt16.1.77-alt1ALT-PU-2021-3573-1292365Fixed
kernel-image-rpi-unp115.15.6-alt16.6.23-alt1ALT-PU-2021-3563-1292137Fixed
kernel-image-rtsisyphus6.1.28-alt1.rt106.1.92-alt1.rt32ALT-PU-2023-1814-1320645Fixed
kernel-image-rtp116.1.28-alt1.rt106.1.90-alt2.rt30ALT-PU-2023-1814-1320645Fixed
kernel-image-std-defsisyphus5.15.22-alt16.1.92-alt1ALT-PU-2022-1240-1293878Fixed
kernel-image-std-defp115.15.22-alt16.1.91-alt1ALT-PU-2022-1240-1293878Fixed
kernel-image-un-defsisyphus5.15.5-alt16.6.32-alt1ALT-PU-2021-3358-1289443Fixed
kernel-image-un-defsisyphus_riscv645.16.8-alt1.rv646.6.32-alt1.0.portALT-PU-2022-3985-1-Fixed
kernel-image-un-defp105.15.11-alt26.1.90-alt1ALT-PU-2021-3660-1291610Fixed
kernel-image-un-defc10f15.15.11-alt26.1.85-alt0.c10f.1ALT-PU-2021-3660-1291610Fixed
kernel-image-un-defp115.15.5-alt16.6.31-alt1ALT-PU-2021-3358-1289443Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2049700
  • Issue Tracking
  • Third Party Advisory
https://github.com/kata-containers/kata-containers/issues/3373
  • Issue Tracking
  • Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-0480
  • Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f12156dff2862ac54235fc72703f18770769042
  • Patch
https://ubuntu.com/security/CVE-2022-0480
  • Third Party Advisory
https://lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm%40linux-foundation.org/
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
      End excliding
      5.15

      Configuration 2

      cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top