Ubuntu Azure CVM kernel update fixes AX.25 use-after-free
A local attacker can crash the system via CVE-2022-1205; other listed flaws could compromise the system.
38
CVE-2022-1205
- CVSS 3.1
- 4.7 medium
- EPSS
- <1%p31
- Published
- ·
- Modified
Description · NVD
A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
- Vendors
- linux
- Products
- linux kernel
- Weakness
- CWE-416, CWE-476
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news
3 storiesUbuntu fixes Linux kernel flaws including AX.25 use-after-free
CVE-2022-1205 is a local race that can crash the system; the notice also covers many other kernel subsystems.
34
Ubuntu patches NVIDIA Tegra kernel denial-of-service flaws
Named issues include AX.25 use-after-free CVE-2022-1205 and i.MX clock null dereference CVE-2022-3114.
32