CVE-2022-0435
HIGHLinux kernel - Memory Corruption
Title source: llmDescription
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
Exploits (3)
References (3)
Scores
CVSS v3
8.8
EPSS
0.5026
EPSS Percentile
97.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (43)
fedoraproject/fedora
34
fedoraproject/fedora
35
linux/linux_kernel
5.17 (4 CPE variants)
linux/linux_kernel
4.8 - 4.9.301
netapp/h300e_firmware
netapp/h300s_firmware
netapp/h410s_firmware
netapp/h500e_firmware
netapp/h500s_firmware
netapp/h700e_firmware
... and 33 more
Published
Mar 25, 2022
Tracked Since
Feb 18, 2026