CVE-2022-28356: Medium severity linux kernel vulnerability
Published Apr 2, 2022
·Updated
In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/afllc.c.
Affected Software
5 affected componentsFixes available
Linux Linux kernel<5.17.1
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Apr 2, 2022
CVE Published
via MITRE·08:36 PM
Data Sourced
via MITRE·08:36 PM
Description
Jan 12, 2024
Data Sourced
via Launchpad·12:08 AM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·04:37 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-28356?
CVE-2022-28356 is classified as a medium-severity vulnerability due to its impact on system stability.
2
How do I fix CVE-2022-28356?
To fix CVE-2022-28356, update your Linux kernel to version 5.17.1 or later.
3
What systems are affected by CVE-2022-28356?
CVE-2022-28356 affects Linux kernel versions prior to 5.17.1 and specific Debian Linux versions 9.0, 10.0, and 11.0.
4
What type of vulnerability is CVE-2022-28356?
CVE-2022-28356 is a refcount leak bug found in the Linux kernel.
5
Is there a patch for CVE-2022-28356 available?
Yes, patches for CVE-2022-28356 have been released in versions of the Linux kernel starting from 5.17.1.