CVE-2022-0850

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-08515.5There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subCVE-2022-08525.5There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could CVE-2022-08537.5A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeateCVE-2022-08545.5A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to CVE-2022-08556.1Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.CVE-2022-08566.5libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of ServiceCVE-2022-08576.1A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remoteCVE-2022-08584.7A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker CVE-2022-08596.7McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL servCVE-2022-08609.1Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.CVE-2022-08613.8A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator atCVE-2022-08625.3A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update
CVE-2022-0850: High severity, CVSS 7.1 | Vulnix