PT-2021-7629 · Linux+5 · Linux Kernel+5

Yutian Yang · Published 2021-09-03 · Updated 2026-05-26 · CVE-2022-0480

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the filelock init function in fs/locks.c of the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks. The exploitation of this flaw can cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

ALSA-2024:2394

ALT-PU-2021-3330

ALT-PU-2021-3358

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2021-3660

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

ALT-PU-2024-1536

BDU:2023-00362

CVE-2022-0480

INFSA-2024_2394

RHSA-2024:1250

RHSA-2024:1303

RHSA-2024:1304

RHSA-2024:1306

RHSA-2024:2394

RHSA-2024_2394

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Linux Kernel

Red Hat

References · 146

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0480 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0480 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0480 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2024-0905SE18MD · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f12156dff2862ac54235fc72703f18770769042 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2022-0480 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0480 · Vendor Advisory
• https://lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm%40linux-foundation.org · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-0480 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0480 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:2394 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2394.html · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-0480 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00362 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-2394.html · Vendor Advisory