Related Vulnerabilities: CVE-2022-0742  

A memory leak flaw was found in the Linux kernel’s ICMPv6 networking protocol, in the way a user generated malicious ICMPv6 packets. This flaw allows a remote user to crash the system.

Description

A memory leak flaw was found in the Linux kernel’s ICMPv6 networking protocol, in the way a user generated malicious ICMPv6 packets. This flaw allows a remote user to crash the system.

Statement

The impact is limited, due to ICMPv6 only possible by a remote system crash (without the possibility of exploiting a remote system).

The impact is limited, due to ICMPv6 only possible by a remote system crash (without the possibility of exploiting a remote system).

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Additional Information

  • Bugzilla 2059294: CVE-2022-0742 kernel: bug memory leaks in ICMPv6 handlers
  • CWE-459: Incomplete Cleanup
  • FAQ: Frequently asked questions about CVE-2022-0742