vulnerability

Red Hat: CVE-2022-0435: CVE-2022-0435 kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (Multiple Advisories)

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Mar 8, 2022
Added
Mar 9, 2022
Modified
Aug 11, 2025

Description

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.