Vulnerability Description
A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 5.15 |
| Redhat | Enterprise Linux | 9.0 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2022-0480Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2049700Issue TrackingThird Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fPatch
- https://github.com/kata-containers/kata-containers/issues/3373Issue TrackingThird Party Advisory
- https://lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm%40linux-foundatVendor Advisory
- https://ubuntu.com/security/CVE-2022-0480Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2022-0480Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2049700Issue TrackingThird Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0fPatch
- https://github.com/kata-containers/kata-containers/issues/3373Issue TrackingThird Party Advisory
- https://lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm%40linux-foundatVendor Advisory
- https://ubuntu.com/security/CVE-2022-0480Third Party Advisory
FAQ
What is CVE-2022-0480?
CVE-2022-0480 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interf...
How severe is CVE-2022-0480?
CVE-2022-0480 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-0480?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Redhat Enterprise Linux.