Lucene search

K
cvelistMitreCVELIST:CVE-2022-47929
HistoryJan 17, 2023 - 12:00 a.m.

CVE-2022-47929

2023-01-1700:00:00
mitre
www.cve.org
2
linux kernel
null pointer dereference
unprivileged user
denial of service
traffic control subsystem

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with “tc qdisc” and “tc class” commands. This affects qdisc_graft in net/sched/sch_api.c.