Search/CVE-2022-0435
● CVE — High

CVE-2022-0435

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
68.0%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
fedora
source
linux kernel
source
h300e firmware
source
h300s firmware
source
enterprise linux
source
enterprise linux eus
source
enterprise linux for ibm z systems
source
enterprise linux for ibm z systems eus
source
enterprise linux for power little endian
source
enterprise linux for power little endian eus
source
enterprise linux server aus
source
enterprise linux server for power little endian update services for sap solutions
source
enterprise linux server tus
source
enterprise linux for real time
source
enterprise linux for real time for nfv
source
enterprise linux server update services for sap solutions
source
virtualization
source
virtualization host
source
enterprise linux for real time for nfv tus
source
enterprise linux for real time tus
source
codeready linux builder
source
codeready linux builder eus
source
codeready linux builder for power little endian eus
source
node
source
codeready linux builder eus for power little endian
source
Timeline
disclosure → media coverage
Mar 25, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024
Public PoC (3)
github.com/wlswotmd/CVE-2022-0435github.com/Spydomain/CVE-2022-0435-Pocgithub.com/sandesh9978/CVE-2022-0435
Unverified third-party code — review before executing.