VULNERABILITY INTELLIGENCE

CVE-2022-2078

CVSS score5.5 MEDIUM
EPSS probability1.05%
CISA KEVNot currently listed
Published2022-06-30
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • CWE-121: Stack-based Buffer Overflow

Primary references