CVE-2022-0185

Linux Kernel Heap-Based Buffer Overflow

8.4 HIGHActively exploited (CISA KEV)Public exploitEPSS 25.2%

Published11 Feb 2022
Added to CISA KEV21 Aug 2024
Remediation due11 Sept 2024

Description

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

CVSS 3.1 breakdown

Attack vectorLocal

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Linux Kernel≥ 5.1 < 5.4.173 · ≥ 5.11 < 5.15.16 · ≥ 5.16 < 5.16.2 · ≥ 5.5 < 5.10.93

Netapp H300e Firmwareall versions

Netapp H300s Firmwareall versions

Netapp H410c Firmwareall versions

Netapp H410s Firmwareall versions

Netapp H500e Firmwareall versions

Netapp H500s Firmwareall versions

Netapp H700e Firmwareall versions

Netapp H700s Firmwareall versions

Remediation

Fixed in

Linux Kernel≥ 5.4.173

Patch & vendor advisories

References

https://github.com/Crusaders-of-Rust/CVE-2022-0185ExploitThird Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2Mailing ListPatch
https://security.netapp.com/advisory/ntap-20220225-0003/Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0185US Government Resource
https://www.openwall.com/lists/oss-security/2022/01/18/7Mailing ListPatchThird Party Advisory
https://www.willsroot.io/2022/01/cve-2022-0185.htmlExploitThird Party Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2022-0185 being actively exploited?

Yes. CVE-2022-0185 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 21 Aug 2024.

How severe is CVE-2022-0185?

CVE-2022-0185 has a CVSS 3.1 base score of 8.4, rated high. EPSS estimates a 25.2% probability of exploitation.

Which products are affected by CVE-2022-0185?

Affected products include Linux Kernel, Netapp H300e Firmware, Netapp H300s Firmware, Netapp H410c Firmware, Netapp H410s Firmware, and 4 more.

How do I fix CVE-2022-0185?

Upgrade affected software to a fixed version, for example Linux Kernel 5.4.173 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2022-0185 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.