CVE-2022-1671

A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information.

Score

CVSS 3.1 7.1 High

Status

Modified - secalert@redhat.com

Published

2022-07-26

Last modified

2024-08-03

Weaknesses

CWE-476

Affected products

• Linux Kernel (Linux)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500s Firmware (Netapp)
• H700s Firmware (Netapp)

References

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ff8376ade4f668130385839cef586a0990f8ef87
• https://security.netapp.com/advisory/ntap-20220901-0004/
• https://security.netapp.com/advisory/ntap-20220901-0008/