Linux Kernel Improper Input Validation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/09/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| Kernel | Versions not published yet (product named by CISA KEV) | |
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free