CVE-2022-0812 Information disclosure in Kernel

Medium 4.3 Published Updated

An attacker with normal user privileges can leak kernel information via NFS over RDMA in the Linux Kernel.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2022-0812?

CVE-2022-0812 is a medium-severity vulnerability in Linux kernel, published on 29 Aug 2022. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.

Weakness: CWE-200

Which versions are affected by CVE-2022-0812?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2022-0812?

Apply the vendor's patch.

Is CVE-2022-0812 being exploited?

There is no known exploitation of CVE-2022-0812 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-0812, GHSA-vxjg-x2cx-9q8c, UBUNTU-CVE-2022-0812.

Is CVE-2022-0812 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free