CVE-2022-0435

State: Published
Severity: Not scored
Published: Mar 25, 2022
Updated: Aug 2, 2024
Reserved: Jan 31, 2022

Description

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Scores

The record has no CVSS score.

Weaknesses

CWE-787

Affected Products

Product	Versions
kerneln/a	kernel 5.17-rc4Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=2048738
https://www.openwall.com/lists/oss-security/2022/02/10/1
https://security.netapp.com/advisory/ntap-20220602-0001/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.