CVE-2022-40768
CVSS v3.1
5.5 (Medium)
EPSS
0.04 % (5th)
Affected Products
3
Advisories
37
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
Weaknesses
- CWE-908
- Use of Uninitialized Resource
- CVE Status
- PUBLISHED
- CNA
- MITRE
- Published Date
-
2022-09-18 05:15:08
(2 years ago) - Updated Date
-
2024-03-25 01:15:52
(5 months ago)
Affected Products
Loading...
Loading...
Configuration #1
|
Configuration #2
|
Configuration #3
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...