PT-2022-2478 · Linux+5 · Linux Kernel+5

Lin Ma · Published 2022-01-31 · Updated 2024-06-24 · CVE-2022-1195

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Race Condition

Weakness Enumeration

CWE-416

CWE-362

Related Identifiers

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-9645

BDU:2022-02885

CVE-2022-1195

DSA-5127-1

DSA-5173-1

OESA-2022-1691

OPENSUSE-SU-2022_1163-1

OPENSUSE-SU-2022_1183-1

OPENSUSE-SU-2024_2185-1

SUSE-SU-2022:1163-1

SUSE-SU-2022:1183-1

SUSE-SU-2022:1407-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2185-1

USN-5469-1

USN-5514-1

USN-5539-1

USN-5560-1

USN-5560-2

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 625

• https://ubuntu.com/security/CVE-2021-28712 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5560-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28713 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0168 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6014-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1183-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1353 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6001-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e0588c291d6ce225f2b891753ca41d45ba42469 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1972 · Vendor Advisory