PT-2022-6240 · Linux+7 · Linux Kernel+7

Published 2017-03-17 · Updated 2025-04-07 · CVE-2022-41858

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the Linux kernel, where a NULL pointer dereference may occur while a slip driver is in progress to detach in sl tx timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

NULL Pointer Dereference

Weakness Enumeration

CWE-416

CWE-476

Related Identifiers

ALSA-2024:0897

ALT-PU-2017-1299

ALT-PU-2018-1557

ALT-PU-2019-1139

ALT-PU-2019-1363

ALT-PU-2020-1145

ALT-PU-2020-1251

ALT-PU-2020-2164

ALT-PU-2021-1447

ALT-PU-2021-1525

ALT-PU-2021-1869

ALT-PU-2021-1888

ALT-PU-2021-1896

ALT-PU-2022-1175

ALT-PU-2022-1750

ALT-PU-2022-1751

ALT-PU-2022-1810

ALT-PU-2022-1826

ALT-PU-2022-1830

ALT-PU-2022-1833

ALT-PU-2022-1853

ALT-PU-2022-1880

ALT-PU-2022-1881

ALT-PU-2022-1907

ALT-PU-2022-2052

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2022-2344

ALT-PU-2023-4894

ALT-PU-2023-8395

AZL-13051

BDU:2023-00629

CESA-2024_0881

CESA-2024_0897

CVE-2022-41858

OESA-2022-2133

OESA-2022-2134

OESA-2022-2162

OPENSUSE-SU-2022_4503-1

OPENSUSE-SU-2022_4504-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4585-1

OPENSUSE-SU-2022_4613-1

OPENSUSE-SU-2022_4616-1

OPENSUSE-SU-2022_4617-1

RHSA-2024:0412

RHSA-2024:0431

RHSA-2024:0432

RHSA-2024:0439

RHSA-2024:0448

RHSA-2024:0461

RHSA-2024:0881

RHSA-2024:0897

RHSA-2024:1268

RHSA-2024:1269

RHSA-2024:1367

RHSA-2024:1382

RHSA-2024:1404

RHSA-2024_0461

RHSA-2024_0881

RHSA-2024_0897

SUSE-SU-2022:4503-1

SUSE-SU-2022:4504-1

SUSE-SU-2022:4505-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4566-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4585-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4613-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4616-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0416-1

USN-5884-1

USN-5926-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 697

• https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798 · Patch
• https://linux.oracle.com/errata/ELSA-2024-0461.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47521 · Security Note
• https://ubuntu.com/security/CVE-2023-0045 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2162 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-12169.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41858 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4574-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4504-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20566 · Security Note
• https://osv.dev/vulnerability/OESA-2022-2134 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0897 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12160.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory