CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux.
CVE
CVE-2022-40768
Severity
MEDIUM
CVSS
5.5
EPSS
0.28%
Linux
Original NVD Description
drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
Related CVEs
Other vulnerabilities affecting the same vendor(s)