NULL pointer dereference in Linux kernel - CVE-2022-4128

Vulnerability identifier: #VU75889

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-4128

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the MPTCP protocol when traversing the subflow list at disconnect time. A local user can perform a denial of service (DoS) attack.

Linux kernel
Oracle Linux
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
kernel (Red Hat package)
kernel-rt (Red Hat package)

Install updates from vendor's website.

kernel (Red Hat package) - update to 5.14.0-284.11.1.el9_2
kernel-rt (Red Hat package) - update to 5.14.0-284.11.1.rt14.296.el9_2

• https://github.com/torvalds/linux/commit/5c835bb142d4
• https://lore.kernel.org/netdev/20220708233610.410786-2-mathew.j.martineau@linux.intel.com/

• Denial of service in Linux kernel MPTCP
• Red Hat Enterprise Linux 9 update for kernel
• Red Hat Enterprise Linux 9 update for kernel-rt
• Multiple vulnerabilities in Oracle Linux