Medium · 5.9 CVE-2022-1678 EUVD-2022-24964GHSA-x4fc-h5x4-26gr

An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns …

Published May 25, 2022 · Updated Aug 3, 2024 · Assigned by Anolis

Package: linux Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-azure Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.3 Package: linux-azure-5.8 Package: linux-azure-edge Package: linux-gcp Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gke-4.15 Package: linux-gke-5.4 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.8 Package: linux-hwe-edge Package: linux-intel-5.13 Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.6 Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-raspi2 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.8 Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.

Affected products

Vendor	Product	Affected	Fixed
—	kernel	4.18 – < unspecified, unspecified – ≤ 4.19	unspecified

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	5.2.6-1	—
Debian 13	linux	5.2.6-1	—
Debian 12	linux	5.2.6-1	—

Ubuntu