Name: CVE-2022-0742: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2022-03-18T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-0742, CWE-275, CWE-401, CVSS 9.1, EPSS 0.05038

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

CVSS Details

CVSS 3.1 Base Score: 9.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux_2023	—	Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42	Feb 17, 2025	Mar 3, 2022
Debian	—	Upgrade linux	Jul 30, 2024	Mar 18, 2022
Suse	—	Upgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-docs	Oct 26, 2022	Mar 18, 2022
Ubuntu	—	Upgrade linux-image-generic-64kUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.14.0-1029-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-kvmUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-gke	Mar 22, 2022	Mar 18, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence