CVE-2022-1198: Use After Free
A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.
Other sources
There are use-after-free vulnerabilities in drivers/net/hamradio/6pack.c of linux that allow attacker to crash linux kernel by simulating Amateur Radio from user-space.
Upstream fix:
https://github.com/torvalds/linux/commit/efe4186e6a1b54bf38b9e05450d43b0da1fd7739
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.17
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1198?
CVE-2022-1198 is classified as a high severity vulnerability due to its potential to crash the Linux kernel.
How do I fix CVE-2022-1198?
To fix CVE-2022-1198, update the Linux kernel to versions greater than 5.17 or apply relevant patches provided by your distribution.
Which Linux versions are affected by CVE-2022-1198?
CVE-2022-1198 affects Linux kernel versions up to and including 5.17, including release candidates.
What components are impacted by CVE-2022-1198?
CVE-2022-1198 primarily impacts the 6pack driver in the hamradio module of the Linux kernel.
Can CVE-2022-1198 be exploited remotely?
Yes, CVE-2022-1198 can potentially be exploited remotely by simulating an ax25 device using the 6pack driver from user space.