CVE-2022-1199

Опубликовано: 29 авг. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.

Ссылки

https://access.redhat.com/security/cve/CVE-2022-1199
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2070694
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/4e0f718daf97d47cf7dec122da1be970f145c809
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/71171ac8eb34ce7fe6b3267dce27c313ab3cb3ac
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/7ec02f5ac8a5be5a3f20611731243dc5e1d9ba10
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221228-0006/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/5
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-1199
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2070694
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/4e0f718daf97d47cf7dec122da1be970f145c809
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/71171ac8eb34ce7fe6b3267dce27c313ab3cb3ac
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/7ec02f5ac8a5be5a3f20611731243dc5e1d9ba10
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221228-0006/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/5
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.17.14 (включая)

cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00078

Низкий

7.5 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-1199

CVSS3: 7.5

ubuntu

больше 3 лет назад

CVE-2022-1199

CVSS3: 7.5

redhat

почти 4 года назад

CVE-2022-1199

CVSS3: 7.5

msrc

больше 3 лет назад

Описание отсутствует

CVE-2022-1199

CVSS3: 7.5

debian

больше 3 лет назад

A flaw was found in the Linux kernel. This flaw allows an attacker to ...

GHSA-rc6f-9g56-mr6q

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 23%

0.00078

Низкий

7.5 High

CVSS3

Дефекты

CWE-416