CVE-2022-0882

Published: May 3, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.

Affected (1)

Products: Google: Fuchsia

Google

1 product

Fuchsia

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Fuchsia	Before 4.1.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=94740

Source: cve-coordination@google.com

ExploitIssue TrackingVendor Advisory

https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=94740

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.