5.3 Medium

CVE-2022-0882 A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required…

Description

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.

Affected products and versions

Product	Affected versions	Fixed in
Fuchsia Kernel 4.1	earliest → < 4.1.1	4.1.1

The 2 CVEs of Fuchsia Kernel →

CVE-2021-22556 The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache… 5.3 Medium

Do you use Fuchsia Kernel?

Track this CVE Watch Fuchsia Kernel Check my SBOMs

www.cveye.io/en/cve/CVE-2022-0882

Timeline

Published May 3, 2022
Last modified April 21, 2025

References

bugs.fuchsia.dev bugs.fuchsia.dev

Track this CVE

CVE-2022-0882 A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required…

Description

Affected products and versions

Other CVEs of Fuchsia Kernel