PT-2022-7477 · Linux+3 · Linux Kernel+3
Shuang Li
·
Published
2022-03-04
·
Updated
2024-09-27
·
CVE-2022-48865
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel's tipc component can cause a kernel panic when enabling a bearer on a node. This occurs due to a null-pointer dereference in the
tipc mon prep() function, which is called by tipc link build proto msg() and tipc link build state msg(). The issue arises when the monitoring pointer in one thread is dereferenced before the monitoring data is allocated in another thread. This vulnerability can be exploited to cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse