First published: Wed Aug 10 2022(Updated: )
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel-rt | <0:4.18.0-477.10.1.rt7.274.el8_8 | 0:4.18.0-477.10.1.rt7.274.el8_8 |
redhat/kernel | <0:4.18.0-477.10.1.el8_8 | 0:4.18.0-477.10.1.el8_8 |
redhat/kernel | <0:5.14.0-284.11.1.el9_2 | 0:5.14.0-284.11.1.el9_2 |
redhat/kernel-rt | <0:5.14.0-284.11.1.rt14.296.el9_2 | 0:5.14.0-284.11.1.rt14.296.el9_2 |
Linux Layer 2 Tunneling Protocol | <6.0 | |
Fedora | =35 | |
Fedora | =36 | |
Fedora | =37 | |
debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.17-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
CVE-2022-4129 is classified as a high severity vulnerability due to its potential to cause a denial of service.
To fix CVE-2022-4129, update the kernel to the latest version specified in the remediation details.
Exploitation of CVE-2022-4129 could lead to a race condition that results in a NULL pointer dereference, potentially crashing the system.
CVE-2022-4129 affects various versions of the Linux kernel, including specific Fedora and Red Hat kernel packages.
CVE-2022-4129 is a local vulnerability that requires an authenticated user to exploit.