CVE-2022-0617: Null Pointer Dereference
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.
Other sources
A flaw was found in the Linux kernel. There is a null pointer dereference bug that would be triggered when writing something to an ICB inode.
Upstream fix:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f
— Red Hat
A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in the way the user triggers the udffilewriteiter function for a malicious UDF image. This flaw allows a local user to crash the system.
Affected Software
Remediation
Information
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-0617?
CVE-2022-0617 has been classified as a high severity vulnerability.
Who is affected by CVE-2022-0617?
CVE-2022-0617 affects local users of the Linux kernel versions from 4.2-rc1 to 5.17-rc2.
How do I fix CVE-2022-0617?
To remediate CVE-2022-0617, update to the latest kernel version specified by your distribution that is above the threshold versions.
What type of vulnerability is CVE-2022-0617?
CVE-2022-0617 is a local denial-of-service vulnerability due to a null pointer dereference in the UDF file system.
Can CVE-2022-0617 crash my system?
Yes, an exploit of CVE-2022-0617 can lead to a crash of the system.