CVE-2022-1198

Опубликовано: 29 авг. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.

Ссылки

https://access.redhat.com/security/cve/CVE-2022-1198
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2070689
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/efe4186e6a1b54bf38b9e05450d43b0da1fd7739
Exploit
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/3
Exploit
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-1198
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2070689
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/efe4186e6a1b54bf38b9e05450d43b0da1fd7739
Exploit
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/3
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.17 (исключая)

cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00019

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-1198

CVSS3: 5.5

ubuntu

больше 3 лет назад

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.

CVE-2022-1198

CVSS3: 5.1

redhat

почти 4 года назад

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.

CVE-2022-1198

CVSS3: 5.5

msrc

больше 3 лет назад

Описание отсутствует

CVE-2022-1198

CVSS3: 5.5

debian

больше 3 лет назад

A use-after-free vulnerabilitity was discovered in drivers/net/hamradi ...

GHSA-p4xr-65m7-ff65

CVSS3: 5.5

github

больше 3 лет назад

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.

EPSS

Процентиль: 4%

0.00019

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416