Skip to main content
← All vulnerabilities
CVE-2022-50200

selinux: Add boundary check in put_entry()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.14.291, 4.19.256, 5.4.211, 5.10.137, 5.15.61, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in put_entry() Just like next_entry(), boundary check is necessary to prevent memory out-of-bound access.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 2dabe6a872a5744865372eb30ea51e8ccd21305a; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 477722f31ad73aa779154d1d7e00825538389f76; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 90bdf50ae70c5571a277b5601e4f5df210831e0a; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in adbfdaacde18faf6cd4e490764045375266b3fbd; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 7363a69d8ca8f0086f8e1196c8ddaf0e168614b1; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 9605f50157cae00eb299e1189a6d708c84935ad8; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in dedd558d9765b72c66e5a53948e9f5abc3ece1f6; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 15ec76fb29be31df2bccb30fc09875274cba2776

  • Linux Linux

    2.6.37

  • KernelLinux

    From 2.6.37 · fixed in 4.14.291; From 4.15.0 · fixed in 4.19.256; From 4.20.0 · fixed in 5.4.211; From 5.5.0 · fixed in 5.10.137; From 5.11.0 · fixed in 5.15.61; From 5.16.0 · fixed in 5.18.18; From 5.19.0 · fixed in 5.19.2

References 8

git.kernel.org