PT-2022-5551 · Linux+5 · Linux+5

Published 2022-07-03 · Updated 2023-08-14 · CVE-2022-2318

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions linux (affected versions not specified)

Description The issue is related to use-after-free vulnerabilities caused by a timer handler in the net/rose/rose timer.c component of the Linux kernel. This allows attackers to crash the Linux kernel without requiring any privileges. The vulnerability is associated with the exploitation of memory after it has been freed, leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-2497

ALT-PU-2022-2523

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10106

BDU:2022-06903

CVE-2022-2318

DLA-3131-1

DSA-5191-1

MGASA-2022-0263

MGASA-2022-0264

OESA-2022-1774

OPENSUSE-SU-2022_2411-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

OPENSUSE-SU-2022_2741-1

OPENSUSE-SU-2022_2875-1

SUSE-SU-2022:2377-1

SUSE-SU-2022:2382-1

SUSE-SU-2022:2393-1

SUSE-SU-2022:2407-1

SUSE-SU-2022:2411-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2022:2721-1

SUSE-SU-2022:2741-1

SUSE-SU-2022:2809-1

SUSE-SU-2022:2840-1

SUSE-SU-2022:2875-1

SUSE-SU-2022:2875-2

SUSE-SU-2022:2892-1

SUSE-SU-2022:2892-2

SUSE-SU-2023:0416-1

USN-5623-1

USN-5624-1

USN-5633-1

USN-5635-1

USN-5640-1

USN-5644-1

USN-5648-1

USN-5655-1

USN-5668-1

USN-5669-1

USN-5669-2

USN-5677-1

USN-5678-1

USN-5679-1

USN-5682-1

USN-5683-1

USN-5684-1

USN-5687-1

USN-5693-1

USN-5695-1

USN-5706-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Suse

Ubuntu

Linux

References · 713

• https://github.com/torvalds/linux/commit/9cc02ede696272c5271a401e4f27c262359bc2f6 · Patch
• https://osv.dev/vulnerability/DSA-5191-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28712 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33742 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5679-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28713 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5706-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6014-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33743 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5633-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2892-1 · Vendor Advisory