CVE-2022-1247
High
Description
An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the rose driver calls rose_del_node() and removes neighbours only if their “count” and “use” are zero.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Linux Kernel
PublishedAug 31, 2022
First seenAug 31, 2022
Weakness typeCWE-362Race condition
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | No range specified | — |
| redhat enterprise_linux | 9.0 | — |
| fedoraproject fedora | 36 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.