CVE-2022-1195

Published: 29 April 2022

A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early.

From the Ubuntu security team

It was discovered that the implementation of the 6pack and mkiss protocols in the Linux kernel did not handle detach events properly in some situations, leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash).

Priority

Medium

CVSS 3 base score: 5.5

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1195
• https://bugzilla.redhat.com/show_bug.cgi?id=2056381
• https://ubuntu.com/security/notices/USN-5469-1
• NVD
• Launchpad
• Debian