CVE-2022-0435

HIGH CVSS: 8.8 Published: 2022-03-25 Modified: 2026-06-17

Description

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Affected Platforms

Redhat Virtualization HostRedhat Enterprise Linux For Ibm Z Systems EusNetapp H300S FirmwareNetapp H700E FirmwareRedhat Enterprise Linux For Real Time For Nfv TusRedhat Codeready Linux Builder For Power Little Endian EusLinux Linux KernelNetapp H700SNetapp H410SRedhat Enterprise Linux Eus

Weakness Type

CWE-787, CWE-787

References

https://bugzilla.redhat.com/show_bug.cgi?id=2048738
https://security.netapp.com/advisory/ntap-20220602-0001/
https://www.openwall.com/lists/oss-security/2022/02/10/1
https://bugzilla.redhat.com/show_bug.cgi?id=2048738
https://security.netapp.com/advisory/ntap-20220602-0001/
https://www.openwall.com/lists/oss-security/2022/02/10/1