CVE-2022-0742: Memory leak in ICMP6 in Linux Kernel
Last updated 24 July 2024
Other sources
Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Patch 2d3916f3189172d5c69d33065c3c21119fe539fc
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0742?
CVE-2022-0742 is classified as a high-severity vulnerability due to its potential to cause denial of service by eating up system memory.
How do I fix CVE-2022-0742?
To fix CVE-2022-0742, upgrade to a version of the Linux Kernel that is past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.
What systems are affected by CVE-2022-0742?
CVE-2022-0742 affects Linux Kernel versions 5.13 and above, including various release candidates up to version 5.17.
Can CVE-2022-0742 be exploited remotely?
Yes, CVE-2022-0742 can be exploited remotely by an attacker sending specific ICMPv6 packets to the vulnerable system.
What type of attack is associated with CVE-2022-0742?
CVE-2022-0742 is associated with a denial-of-service attack that can lead to system crashes or unresponsiveness due to a memory leak.