Remote Unknown

Type Unknown

Description

There are NPD and use-after-free vulnerabilities in net/ax25/ax25_timer.c of linux that allow attacker to crash linux kernel by simulating ax25 device from user space.

AVG-2701 linux-lts 5.15.14-1 High Vulnerable

AVG-2700 linux-hardened 5.16.20.hardened1-1 5.17.5.hardened1-1 High Fixed

AVG-2699 linux-zen 5.17.2.zen3-1 5.17.3.zen1-1 High Fixed

AVG-2698 linux 5.17.2.arch4-1 5.17.3.arch4-1 High Fixed

https://www.openwall.com/lists/oss-security/2022/04/02/4

TODO