CVE-2022-1678

🗓️ 25 May 2022 14:49:30Reported by AnolisType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 117 Views

Issue in Linux Kernel 4.18-4.19, improper sock reference update can lead to memory/netns lea

Reporter	Title	Published	Views	Family All 40
ATTACKERKB	CVE-2022-1678	25 May 202215:15	–	attackerkb
Circl	CVE-2022-1678	25 May 202218:38	–	circl
CNNVD	Linux kernel 安全漏洞	25 May 202200:00	–	cnnvd
Cvelist	CVE-2022-1678	25 May 202214:49	–	cvelist
Debian CVE	CVE-2022-1678	25 May 202214:49	–	debiancve
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1969)	8 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2022-2225)	17 Aug 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2244)	17 Aug 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2257)	17 Aug 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2022-2348)	23 Sep 202200:00	–	nessus

NVD

Node

linux linux_kernelRange4.18–4.19

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp cloud_volumes_ontap_mediatorMatch-

netapp e-series_santricity_os_controllerRange11.0–11.70.2

netapp element_softwareMatch-

netapp hci_management_nodeMatch-

netapp solidfireMatch-

netapp storagegridMatch-

Node

netapp bootstrap_osMatch-

AND

netapp hci_compute_nodeMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.18",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.19",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20220715-0001/
gitee	www.gitee.com/anolis/cloud-kernel/commit/bed537da691b
anas	www.anas.openanolis.cn/errata/detail/ANSA-2022:0143
anas	www.anas.openanolis.cn/cves/detail/CVE-2022-1678
lore	www.lore.kernel.org/all/20200602080425.93712-1-kerneljasonxing%40gmail.com/
github	www.github.com/torvalds/linux/commit/0a70f118475e037732557796accd0878a00fc25a
bugzilla	www.bugzilla.openanolis.cn/show_bug.cgi

21 Nov 2024 06:41Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.15.9 - 7.5

EPSS0.0152

CWE-911