PT-2022-2254 · Linux+9 · Linux Kernel+9

Billy Jheng Bing Jhong + 1 · Published 2022-01-05 · Updated 2025-04-15 · CVE-2022-0168

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the smb2 ioctl query info function in the Linux kernel's Common Internet File System (CIFS), specifically due to an incorrect return from the memdup user function. This flaw allows a local, privileged attacker to crash the system, resulting in a denial of service. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2022:7444

ALSA-2022:7683

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-2050

ALT-PU-2022-2131

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10758

BDU:2022-02361

CESA-2022_7444

CESA-2022_7683

CVE-2022-0168

DSA-5127-1

MGASA-2022-0154

MGASA-2022-0155

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2078-1

OPENSUSE-SU-2022_2079-1

OPENSUSE-SU-2025_1263-1

RHSA-2022:7444

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7444

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

RHSA-2024:0724

RLSA-2022:7444

RLSA-2022:7683

SUSE-SU-2022:2078-1

SUSE-SU-2022:2079-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2177-1

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

USN-5469-1

USN-6284-1

USN-6301-1

USN-6312-1

USN-6314-1

USN-6331-1

USN-6337-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1672

• https://osv.dev/vulnerability/DSA-5127-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28389 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1651 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:2177-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0168 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6312-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-8267.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-6337-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:7444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0168 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0168 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7683.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-40982 · Vendor Advisory