CVE-2022-1516

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-05 · updated 2026-06-17
Weakness: CWE-416

Description

A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system.

Affected products

Debian Linux: 9.0, 10.0
Linux kernel: 5.18-rc1

References

http://www.openwall.com/lists/oss-security/2022/06/19/1
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7781607938c8
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
https://www.debian.org/security/2022/dsa-5173
http://www.openwall.com/lists/oss-security/2022/06/19/1
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7781607938c8
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
https://www.debian.org/security/2022/dsa-5173

Get alerted when CVE-2022-1516 or the next vulnerability affects your stack