CVE-2022-4127: Null Pointer Dereference
Published Nov 28, 2022
·Updated
A NULL pointer dereference issue was discovered in the Linux kernel in iofilesupdatewithindexalloc. A local user could use this flaw to potentially crash the system causing a denial of service.
Affected Software
6 affected components
Linux Linux kernel<5.19
Linux Linux kernel=5.19-rc1
Linux Linux kernel=5.19-rc2
Linux Linux kernel=5.19-rc3
Linux Linux kernel=5.19-rc4
Linux Linux kernel=5.19-rc5
Event History
Nov 28, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-4127?
CVE-2022-4127 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2022-4127?
To fix CVE-2022-4127, update to a version of the Linux kernel that is above 5.19.
3
Who is affected by CVE-2022-4127?
CVE-2022-4127 affects local users on systems running vulnerable versions of the Linux kernel.
4
What type of vulnerability is CVE-2022-4127?
CVE-2022-4127 is a NULL pointer dereference issue found in the Linux kernel.
5
What impact does CVE-2022-4127 have?
The impact of CVE-2022-4127 can lead to system crashes, resulting in a denial of service.