PT-2022-4532 · Linux+5 · Linux Kernel+5

Duoming Zhou · Published 2022-03-26 · Updated 2024-06-15 · CVE-2022-1516

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a NULL pointer dereference flaw in the Linux kernel's X.25 set of standardized network protocols functionality. This flaw occurs when a user terminates their session using a simulated Ethernet card and continues to use the connection. As a result, a local user can crash the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

NULL Pointer Dereference

Weakness Enumeration

CWE-416

CWE-476

Related Identifiers

BDU:2022-05401

CVE-2022-1516

DLA-3065-1

DSA-5127-1

DSA-5173-1

OESA-2022-1691

OPENSUSE-SU-2022_1676-1

OPENSUSE-SU-2022_1687-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2024:12053-1

OPENSUSE-SU-2024:13704-1

SUSE-SU-2022:1651-1

SUSE-SU-2022:1668-1

SUSE-SU-2022:1669-1

SUSE-SU-2022:1676-1

SUSE-SU-2022:1686-1

SUSE-SU-2022:1687-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022_1651-1

SUSE-SU-2022_1669-1

SUSE-SU-2022_1676-1

SUSE-SU-2022_1686-1

SUSE-SU-2022_1687-1

USN-5416-1

USN-5467-1

USN-5469-1

USN-5515-1

USN-5541-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 512

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/Ruia-ruia/CVE-2022-29582-Exploit · Exploit
• 🔥 https://github.com/Markakd/CVE-2021-4154 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-1972-infoleak-PoC · Exploit
• 🔥 https://github.com/ysanatomic/CVE-2022-32250-LPE · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2022-1011 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-4154 · Exploit
• 🔥 https://github.com/ASkyeye/CVE-2022-1966 · Exploit
• 🔥 https://github.com/seadragnol/CVE-2022-32250 · Exploit
• 🔥❌ https://github.com/V4bel/CVE-2022-41218 · Exploit, Deleted
• 🔥❌ https://github.com/nidhi7598/linux-4.19.72_CVE-2022-29581 · Exploit, Deleted
• https://ubuntu.com/security/CVE-2023-26607 · Vendor Advisory