Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Zhang Changzhong

Researcher fromHuawei
#32986of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2021-7075
7.8
2018-11-12
Linux · Linux Kernel · CVE-2022-1678
**Name of the Vulnerable Software and Affected Versions** Linux Kernel versions 4.18 through 4.19 **Description** An issue in the Linux Kernel can lead to memory/netns leak due to an improper update of sock reference in TCP pacing. This can be exploited by remote clients, potentially causing a denial of service. The issue is related to errors in memory usage after release in the TCP Pace Handler component, specifically in the `tcp internal pacing` function in the `net/ipv4/tcp output.c` file. **Recommendations** For Linux Kernel versions 4.18 through 4.19, consider disabling the `tcp internal pacing` function as a temporary workaround to minimize the risk of exploitation. Restrict access to the TCP Pace Handler component to reduce the likelihood of remote clients causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.