Local User Vulnerability in Oracle Linux Kernel
CVE-2022-21385

6.2MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Linux
Vendor
CVE Published:
29 August 2022

What is CVE-2022-21385?

A flaw identified in the Oracle Linux kernel's net_rds_alloc_sgs() function permits unprivileged local users to initiate a system crash. This vulnerability poses a significant risk as it can disrupt system availability and cause unplanned downtime. It is essential to apply necessary patches to mitigate this exposure.

Affected Version(s)

Oracle Linux *

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/...
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.