CVE-2022-0812

mediumpriority · track · 18EPSS 0.015 · 74 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.49% (74th) EPSS

CVSS 4.3 · medium

Is it mine?

17 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4–7.5

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 1.4

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.14mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-200US

affected products (17)

Products and version ranges known to be affected.

NetApp ActiveIQ Unified Manager for VMware vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
n/a Kernel≤ Fixed in v5.8-rc6enisa_euvdEU
Novell Inc. OpenSUSE Leap≤ 15.4fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.3fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 1.6 «Смоленск»fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 11fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 10fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 4.19.249fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 4.9.320fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 5.7.10fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 5.8 rc6fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 5.4.53fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 4.14.285fstec_bduRU
linux linux kernel< 5.8.0nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel= 5.8.0nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2022-1323Linux Kernel: Mehrere SchwachstellenDeutsch2022-09-06csaf · cert_bundDE
Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen, den Systemspeicher zu beschädigen, einen Denial-of-Service-Zustand zu verursachen und seine Privilegien zu erweitern.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund nvd NVD CVE.org MITRE

published 2022-08-29modified 2026-06-17

references (33)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan