CVE-2022-4129

CVSS V2 None CVSS V3 None
Description
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.
Overview
  • CVE ID
  • CVE-2022-4129
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2022-11-28T22:15:11
  • Last Modified Date
  • 2023-02-12T22:15:31
Weakness Enumerations
CWE URL
CWE-362 http://cwe.mitre.org/data/definitions/362.html
CWE-667 http://cwe.mitre.org/data/definitions/667.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:linux:layer_2_tunneling_protocol:*:*:*:*:*:*:*:* 1 OR 6.0
References
Reference URL Reference Tags
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7X5SPXMXXFANDASPCKER2JIQO2F3UHCP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AM5KFIE6JNZXHBA5A2KYDZAT3MEX2B67/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JOKXNIM2R4FQCDRQV67UMAY6EBC72QFG/
https://lore.kernel.org/all/20221114191619.124659-1-jakub@cloudflare.com/t Patch Vendor Advisory
https://lore.kernel.org/netdev/20221121085426.21315-1-jakub@cloudflare.com/t Patch Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-4129
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4129
History
Created Old Value New Value Data Type Notes
2022-12-07 18:05:26 Added to TrackCVE
2022-12-08 06:39:21 2022-11-28T22:15:11.180 2022-11-28T22:15:11 CVE Published Date updated
2022-12-08 06:39:21 2022-12-05T04:15:10 CVE Modified Date updated
2022-12-08 06:39:21 Modified Undergoing Analysis Vulnerability Status updated
2023-02-01 17:14:05 2023-02-01T16:06:08 CVE Modified Date updated
2023-02-01 17:14:05 Undergoing Analysis Analyzed Vulnerability Status updated
2023-02-01 17:14:08 Weakness Enumeration update
2023-02-12 22:18:56 2023-02-12T22:15:31 CVE Modified Date updated
2023-02-12 22:18:56 Analyzed Modified Vulnerability Status updated