PT-2022-1821 · Linux+1 · Linux Kernel+1

Published 2022-03-07 · Updated 2024-06-15 · CVE-2022-0886

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a buffer overflow in the stack due to a vulnerability in the skb page frag refill parameter in the Linux kernel's IPSec protocol suite implementation. This could allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-01251

CVE-2022-0886

OESA-2022-1604

OPENSUSE-SU-2024:11939-1

OPENSUSE-SU-2024:13704-1

SUSE-SU-2022:1255-1

SUSE-SU-2022:1320-1

Affected Products

Linux Kernel

Suse

References · 264

• https://bdu.fstec.ru/vul/2022-01251 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-0886 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0886 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0494 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0854 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1255-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1320-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11939-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1604 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13704-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0886 · Security Note
• https://ubuntu.com/security/CVE-2022-0886 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26490 · Security Note
• https://github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645 · Note
• https://bugzilla.suse.com/1197227 · Note