Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-4128
HistoryNov 28, 2022 - 12:00 a.m.

CVE-2022-4128

2022-11-2800:00:00
ubuntu.com
ubuntu.com
11
cve-2022-4128
mptcp
subflow list
disconnect
denial of service
unix
local user

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

A NULL pointer dereference issue was discovered in the Linux kernel in the
MPTCP protocol when traversing the subflow list at disconnect time. A local
user could use this flaw to potentially crash the system causing a denial
of service.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%