PT-2022-6241 · Linux+8 · Linux Kernel+8

Haowei Yan

·

Published

2022-08-10

·

Updated

2025-08-18

·

CVE-2022-4129

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP) due to a missing lock when clearing sk user data, which can lead to a race condition and NULL pointer dereference. This issue could allow a local user to potentially crash the system, causing a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Race Condition

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476CWE-362CWE-667

Related Identifiers

ALSA-2023:2148
ALSA-2023:2458
ALSA-2023:2736
ALSA-2023:2951
ALT-PU-2023-1012
BDU:2023-00630
CESA-2023_2736
CESA-2023_2951
CVE-2022-4129
DLA-3404-1
MGASA-2023-0087
MGASA-2023-0088
OESA-2022-2141
OESA-2022-2142
OESA-2022-2162
OPENSUSE-SU-2022_4503-1
OPENSUSE-SU-2022_4504-1
OPENSUSE-SU-2022_4585-1
OPENSUSE-SU-2022_4613-1
OPENSUSE-SU-2022_4616-1
OPENSUSE-SU-2022_4617-1
RHSA-2023:2148
RHSA-2023:2458
RHSA-2023:2736
RHSA-2023:2951
RHSA-2023_2148
RHSA-2023_2458
RHSA-2023_2736
RHSA-2023_2951
RHSA-2024:0412
SUSE-SU-2022:4503-1
SUSE-SU-2022:4504-1
SUSE-SU-2022:4585-1
SUSE-SU-2022:4589-1
SUSE-SU-2022:4613-1
SUSE-SU-2022:4614-1
SUSE-SU-2022:4616-1
SUSE-SU-2022:4617-1
SUSE-SU-2023:0747-1
SUSE-SU-2023:0762-1
SUSE-SU-2023:0768-1
SUSE-SU-2023:0770-1
SUSE-SU-2023:0852-1
SUSE-SU-2025:02846-1
SUSE-SU-2025_02846-1
USN-6025-1
USN-6027-1
USN-6040-1
USN-6057-1
USN-6079-1
USN-6091-1
USN-6093-1
USN-6096-1
USN-6134-1
USN-6222-1
USN-6256-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu