CVE-2022-0742
Critical
Published: 18 March 2022
Published
18 March 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
0.0221
84.8th percentile
Risk Priority
20
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-0742 is a critical-severity Missing Release of Memory after Effective Lifetime (CWE-401) vulnerability in Linux Linux Kernel. Its CVSS base score is 9.1 (Critical).
Operationally, ranked in the top 15.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-15809
Vulnerability details
Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
linux
linux kernel
5.17 · 5.13 — 5.15.27 · 5.16 — 5.16.13
netapp
a400 firmware
all versions
netapp
aff 8300 firmware
all versions
netapp
aff 8700 firmware
all versions
netapp
fas 8300 firmware
all versions
netapp
fas 8700 firmware
all versions
netapp
h300e firmware
all versions
netapp
h300s firmware
all versions
netapp
h410c firmware
all versions
netapp
h410s firmware
all versions
+4 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.