CVE Vulnerabilities

CVE-2022-4269

Deadlock

Published: Dec 05, 2022 | Modified: Oct 20, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action mirred) a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.

Weakness

The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux 4.1-rc1 (including) 4.1-rc1 (including)

References