/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2022-1462

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-1462

CGA ID

CGA-c4mg-ch9w-whhv

Severity

6.3

Medium

CVSS V3

Description

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

References

  • https://images.chainguard.dev/security/CGA-c4mg-ch9w-whhv

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs