high 7.8

CVE-2022-4378 json

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables.

published 2023-01-05 3y ago modified 2026-06-17 4mo ago also EUVD-2022-51727

cvss: 7.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 38%
public exploits: 0; none known

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Patch / fix

distros 7 links 2

debian ubuntu red hat suse almalinux rocky linux arch linux

linux Debian 14, Debian 13, Debian 12 6.0.12-1

debian advisories DEBIAN-CVE-2022-4378

linux Ubuntu 22.04 LTS 5.15.0-58.64
linux-aws Ubuntu 22.04 LTS 5.15.0-1028.32
linux-gcp Ubuntu 22.04 LTS 5.15.0-1027.34
linux-gke Ubuntu 22.04 LTS 5.15.0-1027.32
linux-ibm Ubuntu 22.04 LTS 5.15.0-1023.26
linux-kvm Ubuntu 22.04 LTS 5.15.0-1026.31
linux-azure Ubuntu 22.04 LTS 5.15.0-1031.38
linux-gkeop Ubuntu 22.04 LTS 5.15.0-1013.17

ubuntu advisories UBUNTU-CVE-2022-4378

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

kpatch-patch-4_18_0-425_3_1 RHEL 8 1-6.el8
kpatch-patch-4_18_0-425_10_1 RHEL 8 1-4.el8_7
kpatch-patch-4_18_0-425_13_1 RHEL 8 1-2.el8_7
kpatch-patch-5_14_0-162_6_1 RHEL 9 1-2.el9_1
kpatch-patch-5_14_0-162_12_1 RHEL 9 1-1.el9_1
kernel RHEL 9 5.14.0-162.18.1.el9_1
perf RHEL 9 5.14.0-162.18.1.el9_1
bpftool RHEL 9 5.14.0-162.18.1.el9_1

red hat advisories RHSA-2023:1659 RHSA-2023:1435 RHSA-2023:1202 RHSA-2023:1203 RHSA-2023:1008 RHSA-2023:0951

kernel-rt Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-syms-rt Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-rt_debug Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-source-rt Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
dtb-aarch64 openSUSE Leap 15.4, openSUSE Leap 15.3 5.3.18-150300.59.106.1
kernel-64kb SLES 15 SP3-LTSS, SLE Module for Basesystem 15 SP3, SLE High Performance Computing 15 SP3-LTSS +3 more 5.3.18-150300.59.106.1
kernel-syms SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLES 15 SP3-BCL +6 more 5.3.18-150300.59.106.1
kernel-obs-qa openSUSE Leap 15.3 5.3.18-150300.59.106.1

suse advisories SUSE-SU-2022:4617-1 SUSE-SU-2022:4616-1 SUSE-SU-2022:4615-1 SUSE-SU-2022:4614-1 SUSE-SU-2022:4613-1 SUSE-SU-2022:4595-1

kernel AlmaLinux 8 4.18.0-425.19.2.el8_7
perf AlmaLinux 8 4.18.0-425.19.2.el8_7
bpftool AlmaLinux 8 4.18.0-425.19.2.el8_7
kernel-core AlmaLinux 8 4.18.0-425.19.2.el8_7
kernel-tools AlmaLinux 8 4.18.0-425.19.2.el8_7
python3-perf AlmaLinux 8 4.18.0-425.19.2.el8_7
kernel-modules AlmaLinux 8 4.18.0-425.19.2.el8_7
kernel-zfcpdump AlmaLinux 8 4.18.0-425.19.2.el8_7

almalinux advisories ALSA-2023:1566 ALSA-2023:1584 ALSA-2023:0951 ALSA-2023:0979

kernel Rocky Linux 8 4.18.0-425.19.2.el8_7.cloud
kernel-rt Rocky Linux 8 4.18.0-425.19.2.rt7.230.el8_7
kernel Rocky Linux 9 5.14.0-162.18.1.el9_1.cloud
kernel Rocky Linux 8 4.18.0-425.19.2.el8_7
kernel-rt Rocky Linux 9 5.14.0-162.18.1.rt21.181.el9_1

rocky linux advisories RXSA-2023:1566 RLSA-2023:1584 RXSA-2023:0951 RLSA-2023:1566 RLSA-2023:0979

linux-lts Arch Linux 6.2-1
linux-hardened Arch Linux 6.2-1
linux-zen Arch Linux 6.2-1
linux Arch Linux 6.2-1

arch linux advisories AVG-2834 AVG-2835 AVG-2836 AVG-2837

Is CVE-2022-4378 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-4378 updated 2026-08-07 cvss 7.8

kernel: stack overflow in do_proc_dointvec and proc_skip_spaces

Red Hat CodeReady Linux Builder (v. 8) kernel-debuginfo-common-x86_64 4.18.0-425.19.2.el8_7, kernel-debuginfo-common-aarch64 4.18.0-425.19.2.el8_7, kernel-debuginfo-common-ppc64le 4.18.0-425.19.2.el8_7
fixed: vendor fix RHSA-2023:1566
Red Hat CodeReady Linux Builder (v. 9) kernel-debuginfo-common-s390x 5.14.0-162.18.1.el9_1, kernel-debuginfo-common-x86_64 5.14.0-162.18.1.el9_1, kernel-debuginfo-common-aarch64 5.14.0-162.18.1.el9_1, kernel-debuginfo-common-ppc64le 5.14.0-162.18.1.el9_1
fixed: vendor fix RHSA-2023:0951
Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-debuginfo-common-x86_64 4.18.0-372.57.1.el8_6, kernel-debuginfo-common-aarch64 4.18.0-372.57.1.el8_6, kernel-debuginfo-common-ppc64le 4.18.0-372.57.1.el8_6
fixed: vendor fix RHSA-2023:3388
Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-debuginfo-common-s390x 5.14.0-70.49.1.el9_0, kernel-debuginfo-common-x86_64 5.14.0-70.49.1.el9_0, kernel-debuginfo-common-aarch64 5.14.0-70.49.1.el9_0, kernel-debuginfo-common-ppc64le 5.14.0-70.49.1.el9_0
fixed: vendor fix RHSA-2023:1202
Red Hat Enterprise Linux AppStream (v. 9) perf 5.14.0-162.18.1.el9_1, kernel-devel-matched 5.14.0-162.18.1.el9_1, kernel-debug-devel-matched 5.14.0-162.18.1.el9_1, kernel-debuginfo-common-s390x 5.14.0-162.18.1.el9_1, kernel-zfcpdump-devel-matched 5.14.0-162.18.1.el9_1, kernel-debuginfo-common-x86_64 5.14.0-162.18.1.el9_1, +2 more
fixed: vendor fix RHSA-2023:0951
Red Hat Enterprise Linux AppStream EUS (v.9.0) perf 5.14.0-70.49.1.el9_0, kernel-devel-matched 5.14.0-70.49.1.el9_0, kernel-debug-devel-matched 5.14.0-70.49.1.el9_0, kernel-debuginfo-common-s390x 5.14.0-70.49.1.el9_0, kernel-zfcpdump-devel-matched 5.14.0-70.49.1.el9_0, kernel-debuginfo-common-x86_64 5.14.0-70.49.1.el9_0, +2 more
fixed: vendor fix RHSA-2023:1202
Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-425.19.2.el8_7, kernel 4.18.0-425.19.2.el8_7, bpftool 4.18.0-425.19.2.el8_7, kernel-core 4.18.0-425.19.2.el8_7, kernel-tools 4.18.0-425.19.2.el8_7, python3-perf 4.18.0-425.19.2.el8_7, +18 more
fixed: vendor fix RHSA-2023:1566
Red Hat Enterprise Linux BaseOS (v. 9) kernel 5.14.0-162.18.1.el9_1, bpftool 5.14.0-162.18.1.el9_1, kernel-core 5.14.0-162.18.1.el9_1, kernel-tools 5.14.0-162.18.1.el9_1, python3-perf 5.14.0-162.18.1.el9_1, kernel-modules 5.14.0-162.18.1.el9_1, +16 more
fixed: vendor fix RHSA-2023:0951

show 28 more

Red Hat Enterprise Linux BaseOS AUS (v. 8.2) perf 4.18.0-193.100.1.el8_2, kernel 4.18.0-193.100.1.el8_2, bpftool 4.18.0-193.100.1.el8_2, kernel-core 4.18.0-193.100.1.el8_2, kernel-tools 4.18.0-193.100.1.el8_2, python3-perf 4.18.0-193.100.1.el8_2, +8 more
fixed: vendor fix RHSA-2023:1109
Red Hat Enterprise Linux BaseOS E4S (v. 8.1) perf 4.18.0-147.80.1.el8_1, kernel 4.18.0-147.80.1.el8_1, bpftool 4.18.0-147.80.1.el8_1, kernel-core 4.18.0-147.80.1.el8_1, kernel-tools 4.18.0-147.80.1.el8_1, python3-perf 4.18.0-147.80.1.el8_1, +14 more
fixed: vendor fix RHSA-2023:0856
Red Hat Enterprise Linux BaseOS E4S (v. 8.2) perf 4.18.0-193.100.1.el8_2, kernel 4.18.0-193.100.1.el8_2, bpftool 4.18.0-193.100.1.el8_2, kernel-core 4.18.0-193.100.1.el8_2, kernel-tools 4.18.0-193.100.1.el8_2, python3-perf 4.18.0-193.100.1.el8_2, +14 more
fixed: vendor fix RHSA-2023:1109
Red Hat Enterprise Linux BaseOS EUS (v.8.4) perf 4.18.0-305.82.1.el8_4, kernel 4.18.0-305.82.1.el8_4, bpftool 4.18.0-305.82.1.el8_4, kernel-core 4.18.0-305.82.1.el8_4, kernel-tools 4.18.0-305.82.1.el8_4, python3-perf 4.18.0-305.82.1.el8_4, +20 more
fixed: vendor fix RHSA-2023:1221
Red Hat Enterprise Linux BaseOS EUS (v.8.6) perf 4.18.0-372.57.1.el8_6, kernel 4.18.0-372.57.1.el8_6, bpftool 4.18.0-372.57.1.el8_6, kernel-core 4.18.0-372.57.1.el8_6, kernel-tools 4.18.0-372.57.1.el8_6, python3-perf 4.18.0-372.57.1.el8_6, +21 more
fixed: vendor fix RHSA-2023:3388
Red Hat Enterprise Linux BaseOS EUS (v.9.0) kernel 5.14.0-70.49.1.el9_0, bpftool 5.14.0-70.49.1.el9_0, kernel-core 5.14.0-70.49.1.el9_0, kernel-tools 5.14.0-70.49.1.el9_0, python3-perf 5.14.0-70.49.1.el9_0, kernel-modules 5.14.0-70.49.1.el9_0, +19 more
fixed: vendor fix RHSA-2023:1202
Red Hat Enterprise Linux BaseOS TUS (v. 8.2) perf 4.18.0-193.100.1.el8_2, kernel 4.18.0-193.100.1.el8_2, bpftool 4.18.0-193.100.1.el8_2, kernel-core 4.18.0-193.100.1.el8_2, kernel-tools 4.18.0-193.100.1.el8_2, python3-perf 4.18.0-193.100.1.el8_2, +8 more
fixed: vendor fix RHSA-2023:1109
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-1160.88.1.el7, kernel 3.10.0-1160.88.1.el7, bpftool 3.10.0-1160.88.1.el7, python-perf 3.10.0-1160.88.1.el7, kernel-tools 3.10.0-1160.88.1.el7, kernel-tools-libs 3.10.0-1160.88.1.el7, +2 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.88.1.el7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-1160.88.1.el7
fixed: vendor fix RHSA-2023:1091
Red Hat Enterprise Linux CRB EUS (v.8.4) kernel-debuginfo-common-x86_64 4.18.0-305.82.1.el8_4, kernel-debuginfo-common-aarch64 4.18.0-305.82.1.el8_4, kernel-debuginfo-common-ppc64le 4.18.0-305.82.1.el8_4
fixed: vendor fix RHSA-2023:1221
Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-trace 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1160.88.1.rt56.1233.el7
fixed: vendor fix RHSA-2023:1092
Red Hat Enterprise Linux for Real Time (v. 8) kernel-rt 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-core 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-modules 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-debug-core 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-debug-modules 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-modules-extra 4.18.0-425.19.2.rt7.230.el8_7, +2 more
fixed: vendor fix RHSA-2023:1584
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-kvm 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-trace 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debug-kvm 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-trace-kvm 3.10.0-1160.88.1.rt56.1233.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-1160.88.1.rt56.1233.el7
fixed: vendor fix RHSA-2023:1092
Red Hat Enterprise Linux NFV EUS (v.8.4) kernel-rt 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-kvm 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-core 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-modules 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-debug-kvm 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-debug-core 4.18.0-305.82.1.rt7.154.el8_4, +4 more
fixed: vendor fix RHSA-2023:1220
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-core 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-modules 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-core 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-modules 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-modules-extra 5.14.0-162.18.1.rt21.181.el9_1, +2 more
fixed: vendor fix RHSA-2023:0979
Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-core 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-modules 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-debug-core 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-debug-modules 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-modules-extra 5.14.0-70.49.1.rt21.120.el9_0, +2 more
fixed: vendor fix RHSA-2023:1203
Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-kvm 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-core 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-modules 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-debug-kvm 4.18.0-425.19.2.rt7.230.el8_7, kernel-rt-debug-core 4.18.0-425.19.2.rt7.230.el8_7, +4 more
fixed: vendor fix RHSA-2023:1584
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-kvm 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-core 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-modules 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-kvm 5.14.0-162.18.1.rt21.181.el9_1, kernel-rt-debug-core 5.14.0-162.18.1.rt21.181.el9_1, +4 more
fixed: vendor fix RHSA-2023:0979
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-kvm 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-core 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-modules 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-debug-kvm 5.14.0-70.49.1.rt21.120.el9_0, kernel-rt-debug-core 5.14.0-70.49.1.rt21.120.el9_0, +4 more
fixed: vendor fix RHSA-2023:1203
Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2) kernel-rt 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-kvm 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-core 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-modules 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-debug-kvm 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-debug-core 4.18.0-193.100.1.rt13.151.el8_2, +4 more Red Hat Enterprise Linux Real Time TUS (v. 8.2) kernel-rt 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-core 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-modules 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-debug-core 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-debug-modules 4.18.0-193.100.1.rt13.151.el8_2, kernel-rt-modules-extra 4.18.0-193.100.1.rt13.151.el8_2, +2 more
fixed: vendor fix RHSA-2023:1110
Red Hat Enterprise Linux RT EUS (v.8.4) kernel-rt 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-core 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-modules 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-debug-core 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-debug-modules 4.18.0-305.82.1.rt7.154.el8_4, kernel-rt-modules-extra 4.18.0-305.82.1.rt7.154.el8_4, +2 more
fixed: vendor fix RHSA-2023:1220
Red Hat Enterprise Linux Server (v. 6 ELS) perf 2.6.32-754.50.1.el6, kernel 2.6.32-754.50.1.el6, kernel-kdump 2.6.32-754.50.1.el6, kernel-firmware 2.6.32-754.50.1.el6, kernel-abi-whitelists 2.6.32-754.50.1.el6, kernel-debuginfo-common-i686 2.6.32-754.50.1.el6, +2 more
fixed: vendor fix RHSA-2023:1822
Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-1160.88.1.el7, kernel 3.10.0-1160.88.1.el7, bpftool 3.10.0-1160.88.1.el7, python-perf 3.10.0-1160.88.1.el7, kernel-kdump 3.10.0-1160.88.1.el7, kernel-tools 3.10.0-1160.88.1.el7, +11 more
fixed: vendor fix RHSA-2023:1091
Red Hat Enterprise Linux Server AUS (v. 7.4) perf 3.10.0-693.107.1.el7, kernel 3.10.0-693.107.1.el7, python-perf 3.10.0-693.107.1.el7, kernel-tools 3.10.0-693.107.1.el7, kernel-tools-libs 3.10.0-693.107.1.el7, kernel-abi-whitelists 3.10.0-693.107.1.el7, +1 more
fixed: vendor fix RHSA-2023:1706
Red Hat Enterprise Linux Server AUS (v. 7.6) perf 3.10.0-957.100.1.el7, kernel 3.10.0-957.100.1.el7, bpftool 3.10.0-957.100.1.el7, python-perf 3.10.0-957.100.1.el7, kernel-tools 3.10.0-957.100.1.el7, kernel-tools-libs 3.10.0-957.100.1.el7, +2 more
fixed: vendor fix RHSA-2023:1705
Red Hat Enterprise Linux Server AUS (v. 7.7) perf 3.10.0-1062.71.1.el7, kernel 3.10.0-1062.71.1.el7, bpftool 3.10.0-1062.71.1.el7, python-perf 3.10.0-1062.71.1.el7, kernel-tools 3.10.0-1062.71.1.el7, kernel-tools-libs 3.10.0-1062.71.1.el7, +2 more Red Hat Enterprise Linux Server E4S (v. 7.7) perf 3.10.0-1062.71.1.el7, kernel 3.10.0-1062.71.1.el7, bpftool 3.10.0-1062.71.1.el7, python-perf 3.10.0-1062.71.1.el7, kernel-tools 3.10.0-1062.71.1.el7, kpatch-patch-3_10_0-1062_68_1 1-1.el7, +6 more
fixed: vendor fix RHSA-2023:0944
Red Hat Enterprise Linux Server Optional (v. 6 ELS) python-perf 2.6.32-754.50.1.el6, kernel-debuginfo-common-i686 2.6.32-754.50.1.el6, kernel-debuginfo-common-s390x 2.6.32-754.50.1.el6, kernel-debuginfo-common-x86_64 2.6.32-754.50.1.el6
fixed: vendor fix RHSA-2023:1822
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-1160.88.1.el7, kernel-debuginfo-common-x86_64 3.10.0-1160.88.1.el7, kernel-debuginfo-common-ppc64le 3.10.0-1160.88.1.el7
fixed: vendor fix RHSA-2023:1091
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-debuginfo-common-x86_64 3.10.0-693.107.1.el7
fixed: vendor fix RHSA-2023:1706

8 more fixed, 1 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-25-105-08 updated 2025-04-07 cvss 7.8

ABB M2M Gateway

ABB M2M Gateway >=4.1.2, <=5.0.3, >=5.0.1, <=5.0.3
affected: mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-23-166-10 updated 2024-04-09 cvss 7.8

Siemens SIMATIC S7-1500 TM MFP BIOS

Siemens SIMATIC S7-1500 TM MFP - BIOS <V1.3.0
affected: fixed in V1.3.0, workaround support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: last yr. (2025-04-10)

Exploit prediction

0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a kernel

Classification

Weakness

CWE-131 Incorrect Calculation of Buffer Size
CWE-787 Out-of-bounds Write

Technology feeds

Linux kernel rss critical rss

References

git.kernel.org /pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-avoid-integer-type-confusion-in-get_proc
vendor-advisory
git.kernel.org /pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-proc_skip_spaces-shouldn-t-think-it-is-w
vendor-advisory
bugzilla.redhat.com /show_bug.cgi?id=2152548
issue-tracking, third-party-advisory
seclists.org /oss-sec/2022/q4/178
mailing-list, third-party-advisory
packetstormsecurity.com /files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html

Sources

CVE List CVE-2022-4378
NVD CVE-2022-4378

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

json all entries feed