CVE-2022-0882 — Illegal access to Kernel log in Fuchsia

CVE-2022-0882

Illegal access to Kernel log in Fuchsia PUBLISHED

Description (CNA)

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.

Affected (CNA)

Vendor / product	Versions
Google LLC / Fuchsia Kernel	affected unspecified before 4.1.1

CWE

CWE-200

References

https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=94740

ADP enrichment

CVE

No English description supplied.

https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=94740

CISA-ADP

No English description supplied.

No references supplied.