A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw an attacker with a user privileges may crash the system or leak internal kernel information.

🗓️ 09 Apr 2022 07:00:00Reported by MicrosoftType

Use-after-free in Linux sock_getsockopt due to race with peer credentials; may crash or leak kernel info.

Reporter	Title	Published	Views	Family All 421
IBM Security Bulletins	Security Bulletin: Linux Kernel vulnerability may affect IBM Elastic Storage System (CVE-2021-4203)	29 Aug 202211:34	–	ibm
IBM Security Bulletins	Security Bulletin: systemd vulnerability may affect IBM Elastic Storage System (CVE-2021-4203)	12 Dec 202209:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	29 Jun 202223:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect IBM Spectrum Copy Data Management	9 Jun 202217:51	–	ibm
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2022:1988)	12 May 202200:00	–	nessus
Tenable Nessus	CentOS 9 : kernel-5.14.0-347.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-5096-1 : linux - security update	9 Mar 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1429)	18 Apr 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1450)	18 Apr 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1489)	20 Apr 202200:00	–	nessus

Vulners

Node

09 Apr 2022 07:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.9

CVSS 3.16.8

EPSS0.00092