CVE-2022-0742: Memory leak in ICMP6 in Linux Kernel

Published Mar 18, 2022
·
Updated

Last updated 24 July 2024

Other sources

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

Launchpad

Affected Software

61 affected componentsFixes available
Linux Linux kernel>=5.13<5.15.27
Linux Linux kernel>=5.16<5.16.13
Linux Linux kernel=5.17-rc1
Linux Linux kernel=5.17-rc2
Linux Linux kernel=5.17-rc3
Linux Linux kernel=5.17-rc4
Linux Linux kernel=5.17-rc5
Linux Linux kernel=5.17-rc6
All of the following
NetApp A400 Firmware
NetApp A400
All of the following
NetApp Aff 8300 Firmware
NetApp Aff 8300
All of the following
NetApp Aff 8700 Firmware
NetApp Aff 8700
All of the following
NetApp Fas 8300 Firmware
NetApp Fas 8300
All of the following
NetApp Fas 8700 Firmware
NetApp Fas 8700
All of the following
NetApp H300e Firmware
NetApp H300e
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H410c Firmware
NetApp H410c
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H500e Firmware
NetApp H500e
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700e Firmware
NetApp H700e
All of the following
NetApp H700s Firmware
NetApp H700s
NetApp A400 Firmware
NetApp A400
NetApp Aff 8300 Firmware
NetApp Aff 8300
NetApp Aff 8700 Firmware
NetApp Aff 8700
NetApp Fas 8300 Firmware
NetApp Fas 8300
NetApp Fas 8700 Firmware
NetApp Fas 8700
NetApp H300e Firmware
NetApp H300e
NetApp H300s Firmware
NetApp H300s
NetApp H410c Firmware
NetApp H410c
NetApp H410s Firmware
NetApp H410s
NetApp H500e Firmware
NetApp H500e
NetApp H500s Firmware
NetApp H500s
NetApp H700e Firmware
NetApp H700e
NetApp H700s Firmware
NetApp H700s
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1

Event History

Mar 18, 2022
CVE Published
via MITRE·11:20 AM
Data Sourced
via MITRE·11:20 AM
DescriptionSeverityWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:04 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:39 AM
RemedyDescriptionSeverityAffected Software
Apr 8, 2025
Data Sourced
via Debian·04:30 AM
DescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-0742?

CVE-2022-0742 is classified as a high-severity vulnerability due to its potential to cause denial of service by eating up system memory.

2

How do I fix CVE-2022-0742?

To fix CVE-2022-0742, upgrade to a version of the Linux Kernel that is past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

3

What systems are affected by CVE-2022-0742?

CVE-2022-0742 affects Linux Kernel versions 5.13 and above, including various release candidates up to version 5.17.

4

Can CVE-2022-0742 be exploited remotely?

Yes, CVE-2022-0742 can be exploited remotely by an attacker sending specific ICMPv6 packets to the vulnerable system.

5

What type of attack is associated with CVE-2022-0742?

CVE-2022-0742 is associated with a denial-of-service attack that can lead to system crashes or unresponsiveness due to a memory leak.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203