PT-2022-5142 · Linux+4 · Linux Kernel+4

Duoming Zhou · Published 2022-04-02 · Updated 2023-08-14 · CVE-2022-1204

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality. This issue arises in the way a user connects with the protocol, allowing a local user to crash the system. The flaw is related to the implementation of the Amateur Radio AX.25 protocol and can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-1647

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-1810

ALT-PU-2022-1853

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10760

BDU:2022-06399

CVE-2022-1204

DSA-5127-1

DSA-5173-1

MGASA-2022-0154

MGASA-2022-0155

OESA-2022-1705

USN-5469-1

USN-5514-1

USN-5515-1

USN-5539-1

USN-5541-1

USN-5650-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 90

• 🔥 https://openwall.com/lists/oss-security/2022/04/02/2 · Exploit
• https://osv.dev/vulnerability/MGASA-2022-0154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1199 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33981 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5514-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2380 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0850 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1516 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5541-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1966 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2964 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5650-1 · Vendor Advisory