vulnerability
Alma Linux: CVE-2022-0435: Important: kernel security, bug fix, and enhancement update (ALSA-2022-0825)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
9 | (AV:N/AC:L/Au:S/C:C/I:C/A:C) | 2022-03-25 | 2022-05-04 | 2022-09-15 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
2022-03-25
Added
2022-05-04
Modified
2022-09-15
Description
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
Solution
alma-upgrade-kernel-tools-libs-devel

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.