CVE-2022-0435CWE-787

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of…

published March 25, 2022

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
68%
Percentile
99.3
In the wild
Unconfirmed
What it is

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.67770 · 99.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-03-25T00:00Z
EPSS history
Timeline
  • 25 MAR 00:00Z
    A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of…
    cvelistv5