Vulnerability Details CVE-2022-4127
A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user could use this flaw to potentially crash the system causing a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.4%
CVSS Severity
CVSS v3 Score 5.5
References
- https://github.com/torvalds/linux/commit/d785a773bed966a75ca1f11d108ae1897189975b
- https://lore.kernel.org/all/d5a19c1e-9968-e22e-5917-c3139c5e7e89%40kernel.dk/
- https://github.com/torvalds/linux/commit/d785a773bed966a75ca1f11d108ae1897189975b
- https://lore.kernel.org/all/d5a19c1e-9968-e22e-5917-c3139c5e7e89%40kernel.dk/
Products affected by CVE-2022-4127
-
cpe:2.3:o:linux:linux_kernel:5.19