PT-2022-5141 · Linux+5 · Linux Kernel+5

Duoming Zhou · Published 2022-04-02 · Updated 2023-08-14 · CVE-2022-1199

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a flaw in the Linux kernel that can be exploited by an attacker to crash the system by simulating amateur radio from the user space. This results in a null-ptr-deref vulnerability and a use-after-free vulnerability. The exploitation of this flaw may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

NULL Pointer Dereference

Weakness Enumeration

CWE-416

CWE-476

Related Identifiers

ALT-PU-2022-2050

ALT-PU-2022-2058

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10792

BDU:2022-06398

CVE-2022-1199

DLA-3065-1

DSA-5127-1

DSA-5173-1

OESA-2022-1631

OPENSUSE-SU-2022_1163-1

OPENSUSE-SU-2022_1183-1

SUSE-SU-2022:1163-1

SUSE-SU-2022:1183-1

SUSE-SU-2022:1407-1

USN-5469-1

USN-5514-1

USN-5515-1

USN-5539-1

USN-5541-1

USN-5650-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 185

• https://github.com/torvalds/linux/commit/7ec02f5ac8a5be5a3f20611731243dc5e1d9ba10 · Patch
• https://github.com/torvalds/linux/commit/4e0f718daf97d47cf7dec122da1be970f145c809 · Patch
• https://github.com/torvalds/linux/commit/71171ac8eb34ce7fe6b3267dce27c313ab3cb3ac · Patch
• https://ubuntu.com/security/CVE-2022-1198 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3202 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5127-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1199 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-1199 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3028 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5541-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5173-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5539-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5515-1 · Vendor Advisory