CVE-2022-0286

CVE	CVE-2022-0286
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-01-31 16:15:00 UTC
Updated	2023-02-02 16:59:00 UTC
Description	A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.

Problem Types: CWE-476

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	-	All	All	All
Application	Oracle	Communications Cloud Native Core Binding Support Function	22.1.3	All	All	All
Application	Oracle	Communications Cloud Native Core Network Exposure Function	22.1.1	All	All	All
Application	Oracle	Communications Cloud Native Core Policy	22.2.0	All	All	All

Reference	Source	Link	Tags
kernel/git/torvalds/linux.git - Linux kernel source tree	MISC	git.kernel.org
general protection fault in bond_ipsec_add_sa (2)	MISC	syzkaller.appspot.com
Oracle Critical Patch Update Advisory - July 2022	N/A	www.oracle.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

159825 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-1988)
179081 Debian Security Update for linux (CVE-2022-0286)
240275 Red Hat Update for kernel-rt (RHSA-2022:1975)
240298 Red Hat Update for kernel security (RHSA-2022:1988)
751700 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2022:0363-1)
751704 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2022:0370-1)
752005 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:0370-1)
753172 SUSE Enterprise Linux Security Update for the Linux RT Kernel (SUSE-SU-2022:0543-1)
753212 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:0363-1)
940517 AlmaLinux Security Update for kernel (ALSA-2022:1988)