CVE-2022-0812: Infoleak
An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpcrdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.
Other sources
when a file read from nfsrdma is less than 700 bytes, it contains random parts of memory, it is observed that the files were not just corrupted, but contained part of the memory, from other files in the NFS filesystem to .data from the kernel.
Reference: https://bugzilla.redhat.com/showbug.cgi?id=2058361
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0812?
CVE-2022-0812 has a severity level that can lead to information leakage due to flawed handling in NFS over RDMA.
How do I fix CVE-2022-0812?
To mitigate CVE-2022-0812, update to Linux Kernel version 5.10.223-1 or later.
Who is affected by CVE-2022-0812?
CVE-2022-0812 affects users running Linux Kernel versions up to 5.8.0 and its release candidates.
What type of vulnerability is CVE-2022-0812?
CVE-2022-0812 is classified as an information leak vulnerability within the Linux Kernel.
Can CVE-2022-0812 be exploited by an unauthenticated user?
Yes, CVE-2022-0812 can be exploited by an attacker with normal user privileges, allowing them to leak kernel information.