CVE-2022-29581: high-severity vulnerability in Linux Kernel
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.9%
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · KernelRelated CVEs — Linux Kernel
In the same product, most dangerous first.
CVE-2024-1086HIGHUse-after-free in Linux kernel's netfilter: nf_tables componentEPSS 28.1%KEVCVE-2018-5391—The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsEPSS 32.4%CVE-2022-3435MEDIUMLinux Kernel IPv4 fib_semantics.c fib_nh_match out-of-boundsEPSS 5.2%CVE-2022-0742CRITICALMemory leak in ICMP6 in Linux KernelEPSS 5.0%CVE-2022-3594MEDIUMLinux Kernel BPF r8152.c intr_callback logging of excessive dataEPSS 3.1%CVE-2021-31440HIGHCVE-2021-31440EPSS 1.8%
References
http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.htmlhttp://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.htmlhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3db09e762dc79584a69c10d74a6b98f89a9979f8https://kernel.dance/#3db09e762dc79584a69c10d74a6b98f89a9979f8https://security.netapp.com/advisory/ntap-20220629-0005/https://www.debian.org/security/2022/dsa-5173http://www.openwall.com/lists/oss-security/2022/05/18/2