CVE-2022-2639

HIGH

7.8

CVSS Score

Published: September 1, 2022 at 08:32 PM UTC

Updated: June 17, 2026 at 04:42 AM UTC

3 products affected across 2 vendorsLinux KernelEnterprise LinuxKernel

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.9%

Description

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.18.139 ≤ v < 3.194.14.112 ≤ v < 4.14.2774.19.35 ≤ v < 4.19.2404.4.179 ≤ v < 4.54.9.169 ≤ v < 4.9.3125.0.8 ≤ v < 5.4.1915.11 ≤ v < 5.15.365.16 ≤ v < 5.17.55.5 ≤ v < 5.10.113

Affected range stops below 3.19, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14.277, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.240, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.312, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.113, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.36, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.17.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.191, so it looks safe — our inference, not a vendor statement

Enterprise Linux · Red Hatrpm

95%

8.0 9.0

Kernel · Red Hat

60%

5.18

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

x_refsource_MISCIssue TrackingPatchThird Party Advisory

Source: [email protected]

https://bugzilla.redhat.com/show_bug.cgi?id=2084479

x_refsource_MISCExploitPatch

Source: [email protected]

https://github.com/torvalds/linux/commit/cefa91b2332d7009bc0be5d951d6cbbf349f90f8

CVSS

7.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-192CWE-681

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card