CVE-2022-27666

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

Affected products

Alt Linux, Almalinux, Astra Linux, Centos, Linuxmint, Linux Kernel, Red Hat, Red Os

Linux Linux Kernel

< 5.17

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

5.5% (92th percentile)

Weakness

CWE-787

NVD status

Modified

Published

2022-03-23