exploitDog

CVE-2022-41858

Опубликовано: 17 янв. 2023

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

Ссылки

https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230223-0006/
Third Party Advisory
https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230223-0006/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.9.311 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.14.276 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.239 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.190 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.10.112 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.35 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 5.17.4 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.0001

Низкий

7.1 High

CVSS3

Дефекты

CWE-416

CWE-476

Связанные уязвимости

CVE-2022-41858

CVSS3: 7.1

ubuntu

больше 2 лет назад

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

CVE-2022-41858

CVSS3: 7.1

redhat

около 3 лет назад

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

CVE-2022-41858

CVSS3: 7.1

msrc

больше 2 лет назад

Описание отсутствует

CVE-2022-41858

CVSS3: 7.1

debian

больше 2 лет назад

A flaw was found in the Linux kernel. A NULL pointer dereference may o ...

GHSA-5r4m-496r-7wqm

CVSS3: 7.1

github

больше 2 лет назад

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

EPSS

Процентиль: 1%

0.0001

Низкий

7.1 High

CVSS3

Дефекты

CWE-416

CWE-476