CVE-2022-36123

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1
Siemens	RUGGEDCOM ROX MX5000	< V2.17.0
Siemens	RUGGEDCOM ROX MX5000RE	< V2.17.0
Siemens	RUGGEDCOM ROX RX1400	< V2.17.0
Siemens	RUGGEDCOM ROX RX1500	< V2.17.0
Siemens	RUGGEDCOM ROX RX1501	< V2.17.0
Siemens	RUGGEDCOM ROX RX1510	< V2.17.0
Siemens	RUGGEDCOM ROX RX1511	< V2.17.0
Siemens	RUGGEDCOM ROX RX1512	< V2.17.0
Siemens	RUGGEDCOM ROX RX1524	< V2.17.0
Siemens	RUGGEDCOM ROX RX1536	< V2.17.0
Siemens	RUGGEDCOM ROX RX5000	< V2.17.0

References

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13Release Notes, Third Party Advisory
https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.mdExploit, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220901-0003/Third Party Advisory
https://sick.codes/sick-2022-128Exploit, Patch, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13Release Notes, Third Party Advisory
https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-128.mdExploit, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/74a0032b8524ee2bd4443128c0bf9775928680b0Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/96e8fc5818686d4a1591bb6907e7fdb64ef29884Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220901-0003/Third Party Advisory
https://sick.codes/sick-2022-128Exploit, Patch, Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-202008.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Jul 29, 2022
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-361247.5It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affect CVE-2022-361257.5It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache A CVE-2022-361267.2An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attack CVE-2022-361277.5A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed CVE-2022-361299.1HashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4, and 1.11.0 clusters using Integrated Storage expose an unauthenticated API endpoint CVE-2022-36137.5An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versio CVE-2022-361309.9HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scop CVE-2022-361316.1The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page CVE-2022-361339.1The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass.CVE-2022-361364.8ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.CVE-2022-361374.8ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.CVE-2022-361397.8SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char).