An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1.
{
"cna_assigner": "redhat",
"cwe_ids": [
"CWE-909"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0382.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "5.17-rc1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "VersionTextExtraction"
},
{
"range": [
{
"fixed": "d6d86830705f173fca6087a3e67ceaf68db80523"
}
],
"source": "REFERENCES_COMMIT"
}
]
}