CVE-2022-24959: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yamsiocdevprivate in drivers/net/hamradio/yam.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.16.5
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24959?
CVE-2022-24959 has a moderate severity due to its memory leak vulnerability in the Linux kernel.
How do I fix CVE-2022-24959?
To fix CVE-2022-24959, update the Linux kernel to versions 5.16.5 or later, or apply the latest patches provided by your distribution.
Which versions of the Linux kernel are affected by CVE-2022-24959?
CVE-2022-24959 affects the Linux kernel versions prior to 5.16.5.
Is CVE-2022-24959 present in Debian Linux?
Yes, CVE-2022-24959 is present in Debian Linux versions 9.0, 10.0, and 11.0 before the relevant patches are applied.
What types of systems are susceptible to CVE-2022-24959?
Systems running affected versions of the Linux kernel, especially those using yam_siocdevprivate in yam.c, are susceptible to CVE-2022-24959.