CVE-2022-1353
Summary
| CVE | CVE-2022-1353 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-29 16:15:08 UTC |
| Updated | 2026-08-05 22:17:06 UTC |
| Description | A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. |
Risk And Classification
Primary CVSS: v3.1 7.1 HIGH from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS: 0.003880000 probability, percentile 0.316410000 (date 2026-08-09)
Problem Types: CWE-200 | NVD-CWE-noinfo | CWE-200 CWE-200
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 7.1 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
| 2.0 | [email protected] | Primary | 3.6 | AV:L/AC:L/Au:N/C:P/I:N/A:P |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
PartialAV:L/AC:L/Au:N/C:P/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Debian | Debian Linux | 9.0 | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc7 | All | All |
| Operating System | Linux | Linux Kernel | 5.17 | rc8 | All | All |
| Hardware | Netapp | H300e | - | All | All | All |
| Operating System | Netapp | H300e Firmware | - | All | All | All |
| Hardware | Netapp | H300s | - | All | All | All |
| Operating System | Netapp | H300s Firmware | - | All | All | All |
| Hardware | Netapp | H410c | - | All | All | All |
| Operating System | Netapp | H410c Firmware | - | All | All | All |
| Hardware | Netapp | H410s | - | All | All | All |
| Operating System | Netapp | H410s Firmware | - | All | All | All |
| Hardware | Netapp | H500e | - | All | All | All |
| Operating System | Netapp | H500e Firmware | - | All | All | All |
| Hardware | Netapp | H500s | - | All | All | All |
| Operating System | Netapp | H500s Firmware | - | All | All | All |
| Hardware | Netapp | H700e | - | All | All | All |
| Operating System | Netapp | H700e Firmware | - | All | All | All |
| Hardware | Netapp | H700s | - | All | All | All |
| Operating System | Netapp | H700s Firmware | - | All | All | All |
| Operating System | Redhat | Enterprise Linux | 8.0 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Kernel | affected 4.9.311 semver | Not specified |
| CNA | Linux | Kernel | affected 4.10 4.14.276 semver | Not specified |
| CNA | Linux | Kernel | affected 4.15 4.19.238 semver | Not specified |
| CNA | Linux | Kernel | affected 4.20 5.4.189 semver | Not specified |
| CNA | Linux | Kernel | affected 5.5 5.10.110 semver | Not specified |
| CNA | Linux | Kernel | affected 5.11 5.15.33 semver | Not specified |
| CNA | Linux | Kernel | affected 5.16 5.16.19 semver | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-5127-1 linux | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | Third Party Advisory |
| May 2022 Linux Kernel Vulnerabilities in NetApp Products | NetApp Product Security | af854a3a-2127-422b-91ae-364da2661108 | security.netapp.com | Third Party Advisory |
| 2066819 – (CVE-2022-1353) CVE-2022-1353 Kernel: A kernel-info-leak issue in pfkey_register | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Issue Tracking, Patch, Third Party Advisory |
| [SECURITY] [DLA 3065-1] linux security update | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | Mailing List, Third Party Advisory |
| af_key: add __GFP_ZERO flag for compose_sadb_supported in function pf… · torvalds/linux@9a564bc · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | Patch, Third Party Advisory |
| Debian -- Security Information -- DSA-5173-1 linux | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159896 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9479)
- 159899 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9480)
- 160171 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-7110)
- 160270 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-8267)
- 160346 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-26385)
- 179258 Debian Security Update for linux (DSA 5127-1)
- 180282 Debian Security Update for linux (DLA 3065-1)
- 180605 Debian Security Update for linux (DSA 5173-1)
- 183681 Debian Security Update for linux (CVE-2022-1353)
- 198822 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5469-1)
- 198824 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5467-1)
- 198858 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5515-1)
- 240599 Red Hat Update for kernel-rt (RHSA-2022:5934)
- 240603 Red Hat Update for kernel (RHSA-2022:5998)
- 240643 Red Hat Update for kernel-rt (RHSA-2022:6248)
- 240644 Red Hat Update for kernel (RHSA-2022:6243)
- 240776 Red Hat Update for kernel-rt (RHSA-2022:7134)
- 240782 Red Hat Update for kernel security (RHSA-2022:7110)
- 240869 Red Hat Update for kernel-rt (RHSA-2022:7933)
- 240904 Red Hat Update for kernel security (RHSA-2022:8267)
- 353293 Amazon Linux Security Advisory for kernel : ALAS2-2022-1793
- 353956 Amazon Linux Security Advisory for kernel : ALAS-2022-1591
- 353964 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2022-001
- 354327 Amazon Linux Security Advisory for kernel : ALAS2022-2022-083
- 354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
- 354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
- 355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
- 355563 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2023-036
- 355565 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2023-023
- 376925 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2022:0125)
- 377053 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2022:0028)
- 6140343 AWS Bottlerocket Security Update for kernel (GHSA-p2v7-3rfx-jq76)
- 671862 EulerOS Security Update for kernel (EulerOS-SA-2022-1896)
- 671870 EulerOS Security Update for kernel (EulerOS-SA-2022-1934)
- 671915 EulerOS Security Update for kernel (EulerOS-SA-2022-1969)
- 671929 EulerOS Security Update for kernel (EulerOS-SA-2022-1999)
- 671975 EulerOS Security Update for kernel (EulerOS-SA-2022-2159)
- 672003 EulerOS Security Update for kernel (EulerOS-SA-2022-2134)
- 752120 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1651-1)
- 752125 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1686-1)
- 752126 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1687-1)
- 752231 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2082-1)
- 752237 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2083-1)
- 752240 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2103-1)
- 752242 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2104-1)
- 752250 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2111-1)
- 753176 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1676-1)
- 753299 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:1669-1)
- 753703 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 753707 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 753727 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
- 901304 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9653)
- 901910 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9646)
- 902010 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9653-1)
- 902092 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9646-1)
- 905856 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9653-2)
- 906514 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (9646-2)
- 940709 AlmaLinux Security Update for kernel-rt (ALSA-2022:7134)
- 940719 AlmaLinux Security Update for kernel (ALSA-2022:7110)
- 940798 AlmaLinux Security Update for kernel (ALSA-2022:8267)
- 940843 AlmaLinux Security Update for kernel-rt (ALSA-2022:7933)
- 960271 Rocky Linux Security Update for kernel-rt (RLSA-2022:7134)
- 960397 Rocky Linux Security Update for kernel (RLSA-2022:7110)