What’s Vulnerable › Vulnerabilities

CVE-2022-1199

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-29 · updated 2026-09-11
• Weakness: CWE-416

Description

A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.

Affected products

• Linux kernel: before 4.14.277; from 4.15 before 4.19.240; from 4.20 before 5.4.190; from 5.5 before 5.10.112; from 5.11 before 5.15.35 — fixed in 4.14.277, 4.19.240, 5.10.112, 5.15.35, 5.4.190
• Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H700S Firmware: all versions
• Red Hat Enterprise Linux: 6.0

How to fix

Upgrade to a fixed version: Linux kernel 4.14.277, 4.19.240, 5.10.112, 5.15.35. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/security/cve/CVE-2022-1199
• https://bugzilla.redhat.com/show_bug.cgi?id=2070694
• https://github.com/torvalds/linux/commit/4e0f718daf97d47cf7dec122da1be970f145c809
• https://github.com/torvalds/linux/commit/71171ac8eb34ce7fe6b3267dce27c313ab3cb3ac
• https://github.com/torvalds/linux/commit/7ec02f5ac8a5be5a3f20611731243dc5e1d9ba10
• https://security.netapp.com/advisory/ntap-20221228-0006/
• https://www.openwall.com/lists/oss-security/2022/04/02/5
• https://access.redhat.com/security/cve/CVE-2022-1199
• https://bugzilla.redhat.com/show_bug.cgi?id=2070694
• https://github.com/torvalds/linux/commit/4e0f718daf97d47cf7dec122da1be970f145c809
• https://github.com/torvalds/linux/commit/71171ac8eb34ce7fe6b3267dce27c313ab3cb3ac
• https://github.com/torvalds/linux/commit/7ec02f5ac8a5be5a3f20611731243dc5e1d9ba10

Get alerted when CVE-2022-1199 or the next vulnerability affects your stack