CVE-2022-1205

MEDIUM

Linux Kernel < 5.17 - Use After Free

Title source: rule
STIX 2.1

Description

A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

References (5)

Core 5
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=2071047
Exploit, Mailing List, Third Party Advisory x_refsource_misc
https://www.openwall.com/lists/oss-security/2022/04/02/4
Third Party Advisory x_refsource_misc
https://access.redhat.com/security/cve/CVE-2022-1205

Scores

CVSS v3 4.7
EPSS 0.0012
EPSS Percentile 30.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476 CWE-416
Status published
Products (1)
linux/linux_kernel < 5.17
Published Aug 31, 2022
Tracked Since Feb 18, 2026