CVE-2022-1205: Null Pointer Dereference
A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
Other sources
A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality. This flaw allows a local user to crash the system.
There are null pointer dereference and use-after-free vulnerabilities in net/ax25/ax25timer.c of linux that allow attacker to crash linux kernel by simulating Amateur Radio from user-space.
Upstream fix:
https://github.com/torvalds/linux/commit/fc6d01ff9ef03b66d4a3a23b46fc3c3d8cf92009 https://github.com/torvalds/linux/commit/82e31755e55fbcea6a9dfaae5fe4860ade17cbc0
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 82e31755e55fbcea6a9dfaae5fe4860ade17cbc0 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch fc6d01ff9ef03b66d4a3a23b46fc3c3d8cf92009
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1205?
CVE-2022-1205 is categorized as a high-severity vulnerability due to its ability to allow a local user to crash the system.
How do I fix CVE-2022-1205?
To fix CVE-2022-1205, upgrade the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
What type of vulnerability is CVE-2022-1205?
CVE-2022-1205 is a NULL pointer dereference vulnerability found in the Amateur Radio AX.25 protocol functionality of the Linux kernel.
Who is impacted by CVE-2022-1205?
CVE-2022-1205 impacts local users on systems running the vulnerable versions of the Linux kernel that utilize the Amateur Radio AX.25 protocol.
When was CVE-2022-1205 disclosed?
CVE-2022-1205 was disclosed in 2022, affecting multiple versions of the Linux kernel prior to 5.17.