A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.
2022-03-25T19:15:09.833
2024-11-21T06:37:08.430
Modified
CVSSv3.1: 6.8 (MEDIUM)
AV:N/AC:M/Au:S/C:P/I:N/A:P
6.8
4.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | linux | linux_kernel | < 5.15 | Yes |
| Operating System | linux | linux_kernel | 5.15 | Yes |
| Operating System | linux | linux_kernel | 5.15 | Yes |
| Operating System | linux | linux_kernel | 5.15 | Yes |
| Operating System | linux | linux_kernel | 5.15 | Yes |
| Application | netapp | active_iq_unified_manager | - | Yes |
| Application | netapp | e-series_santricity_os_controller | ≤ 11.70.2 | Yes |
| Application | netapp | element_software | - | Yes |
| Application | netapp | hci_management_node | - | Yes |
| Application | netapp | solidfire | - | Yes |
| Operating System | netapp | bootstrap_os | - | Yes |
| Hardware | netapp | hci_compute_node | - | No |
| Operating System | netapp | a700s_firmware | - | Yes |
| Hardware | netapp | a700s | - | No |
| Operating System | netapp | h300s_firmware | - | Yes |
| Hardware | netapp | h300s | - | No |
| Operating System | netapp | h500s_firmware | - | Yes |
| Hardware | netapp | h500s | - | No |
| Operating System | netapp | h700s_firmware | - | Yes |
| Hardware | netapp | h700s | - | No |
| Operating System | netapp | h410s_firmware | - | Yes |
| Hardware | netapp | h410s | - | No |
| Operating System | netapp | h410c_firmware | - | Yes |
| Hardware | netapp | h410c | - | No |
| Application | oracle | communications_cloud_native_core_binding_support_function | 22.1.3 | Yes |
| Application | oracle | communications_cloud_native_core_network_exposure_function | 22.1.1 | Yes |
| Application | oracle | communications_cloud_native_core_policy | 22.2.0 | Yes |