A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAPSYSADMIN or CAPSYSRAWIO) to create issues with confidentiality.
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.17"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.17-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.17-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.17-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.17-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.17-rc4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "10.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0494.json"