cbcvebase.
CVE-2022-0435
published 2022-03-25

CVE-2022-0435: A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of…

high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Affected

65 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 5.16.10-1 (bookworm)linux 5.16.10-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
linuxlinux
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < 175db196e45d6f0e6047eccd09c8ba55465eb131175db196e45d6f0e6047eccd09c8ba55465eb131
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < fde4ddeadd099bf9fbb9ccbee8e1b5c20d530a2dfde4ddeadd099bf9fbb9ccbee8e1b5c20d530a2d
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < f1af11edd08dd8376f7a84487cbb0ea8203e3a1df1af11edd08dd8376f7a84487cbb0ea8203e3a1d
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < d692e3406e052dbf9f6d9da0cba36cb763272529d692e3406e052dbf9f6d9da0cba36cb763272529
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < 3c7e5943553594f68bbc070683db6bb6f6e9e78e3c7e5943553594f68bbc070683db6bb6f6e9e78e
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < 1f1788616157b0222b0c2153828b475d95e374a71f1788616157b0222b0c2153828b475d95e374a7
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < 59ff7514f8c56f166aadca49bcecfa028e0ad50f59ff7514f8c56f166aadca49bcecfa028e0ad50f
linuxlinux>= 35c55c9877f8de0ab129fa1a309271d0ecc868b9 < 9aa422ad326634b76309e8ff342c2468006212169aa422ad326634b76309e8ff342c246800621216
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.103-15.10.103-1
linuxlinux_kernel>= 0 < 5.10.92-25.10.92-2
linuxlinux_kernel>= 0 < 5.16.10-15.16.10-1
linuxlinux_kernel>= 0 < 5.16.10-15.16.10-1
linuxlinux_kernel>= 0 < 5.16.10-15.16.10-1
linuxlinux_kernel>= 0 < 4.15.0-173.1824.15.0-173.182
linuxlinux_kernel>= 0 < 5.4.0-105.1195.4.0-105.119
linuxlinux_kernel>= 4.10 < 4.14.2664.14.266
linuxlinux_kernel>= 4.15 < 4.19.2294.19.229
linuxlinux_kernel>= 4.20 < 5.4.1795.4.179
linuxlinux_kernel>= 4.8 < 4.9.3014.9.301
linuxlinux_kernel>= 5.11 < 5.15.235.15.23

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH