What is CVE-2022-21817?

CVE-2022-21817 is a critical-severity vulnerability in Linux Kernel. CVSS score: 9.3/10. Published 2022-02-02.

How severe is CVE-2022-21817?

Critical severity. CVSS v3 base score is 9.3 out of 10.

Vulnerability in Linux Kernel

CVE-2022-21817

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

EPSS: 0.017 (75.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N.

Affected products

Linux Linux_kernel
Microsoft Windows
Nvidia Omniverse_launcher
N/a — versions n/a

References

psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-21817?: CVE-2022-21817 is a critical-severity vulnerability in Linux Kernel. CVSS score: 9.3/10. Published 2022-02-02.
How severe is CVE-2022-21817?: Critical severity. CVSS v3 base score is 9.3 out of 10.