CVE-2022-1975: Medium severity Linux Linux kernel vulnerability
Last updated 18 October 2026
Other sources
There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1975?
CVE-2022-1975 is considered critical due to its potential to crash the Linux kernel.
How do I fix CVE-2022-1975?
To fix CVE-2022-1975, update to the patched versions of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are vulnerable to CVE-2022-1975?
Vulnerable Linux kernel versions include 5.18-rc6 and those prior that have not been patched.
What does CVE-2022-1975 vulnerability exploit?
CVE-2022-1975 exploits a sleep-in-atomic bug in the NFC netlink subsystem.
Can CVE-2022-1975 be exploited remotely?
Yes, CVE-2022-1975 can potentially be exploited remotely by simulating an NFC device from user-space.