CVE-2022-2873: Medium severity Linux Linux kernel vulnerability
A flaw out of bounds memory access found in the Intel iSMT SMBus host controller driver. If local user triggers I2CSMBUSBLOCKDATA (with the ioctl I2CSMBUS) with some malicious input data, it can lead to system crash. The problem located in ismtaccess() function of the drivers/i2c/busses/i2c-ismt.c.
Other sources
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA (with the ioctl I2CSMBUS) with malicious input data. This flaw allows a local user to crash the system.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-2873?
CVE-2022-2873 is classified with a high severity due to its potential to cause a system crash.
How do I fix CVE-2022-2873?
To fix CVE-2022-2873, update to the appropriate kernel versions specified in the remediation section.
What are the affected software for CVE-2022-2873?
CVE-2022-2873 affects several versions of the Linux kernel across different distributions such as Red Hat and Debian.
Can CVE-2022-2873 be exploited remotely?
CVE-2022-2873 requires local access for exploitation, making remote exploitation unlikely.
Is there a workaround for CVE-2022-2873?
No specific workaround is documented for CVE-2022-2873, so updating to a patched version is recommended.