PT-2022-2601 · Linux+10 · Linux Kernel+10
Kyle Zeng
+1
·
Published
2022-04-15
·
Updated
2025-09-29
·
CVE-2022-29581
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 5.18
Linux Kernel version 4.14 and later versions
Description
The issue is related to an improper update of the reference count in the net/sched component of the Linux Kernel, which can be exploited by a local attacker to cause privilege escalation to the root level. This allows the attacker to gain elevated privileges.
Recommendations
For Linux Kernel versions prior to 5.18, update to version 5.18 or later to resolve the issue.
For Linux Kernel version 4.14 and later versions, ensure that any updates or patches related to the net/sched component are applied to mitigate the risk of exploitation.
As a temporary workaround, consider restricting access to the net/sched component until a patch is available.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linux Kernel
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu