CVE-2022-0998

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

• CWE-190
• CWE-190

• http://www.openwall.com/lists/oss-security/2022/04/02/1Mailing List, Patch, Third Party Advisory
• https://lore.kernel.org/netdev/20220123001216.2460383-13-sashal%40kernel.org/
• https://security.netapp.com/advisory/ntap-20220513-0003/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/04/02/1Mailing List, Patch, Third Party Advisory
• https://lore.kernel.org/netdev/20220123001216.2460383-13-sashal%40kernel.org/
• https://security.netapp.com/advisory/ntap-20220513-0003/Third Party Advisory

Published

Mar 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0992The SiteGround Security plugin for WordPress is vulnerable t…9.8
• CVE-2022-0993The SiteGround Security plugin for WordPress is vulnerable t…9.8
• CVE-2022-0994The Hummingbird WordPress plugin before 3.3.2 does not sanit…4.8
• CVE-2022-0995An out-of-bounds (OOB) memory write flaw was found in the Li…7.8
• CVE-2022-0996A vulnerability was found in the 389 Directory Server that a…6.5
• CVE-2022-0997Improper file permissions in the CommandPost, Collector, and…7.8
• CVE-2022-0999An authenticated user may be able to misuse parameters to in…8.8
• CVE-2022-1000Path Traversal in GitHub repository prasathmani/tinyfilemana…9.8
• CVE-2022-1001The WP Downgrade WordPress plugin before 1.2.3 only perform …4.8
• CVE-2022-1002Mattermost 6.3.0 and earlier fails to properly sanitize the …5.4
• CVE-2022-1003One of the API in Mattermost version 6.3.0 and earlier fails…4.9
• CVE-2022-1004Accounted time is shown in the Ticket Detail View (External …4.3