CVE-2022-49092: linux kernel from 5.3 (inclusive), before 5.4.189 (exclusive), from 5.5 (inclusive), before 5.10.111 (exclusive), from…

Affected technology

linux kernel · from 5.3 (inclusive), before 5.4.189 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.111 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.34 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.16.20 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 5.17.3 (exclusive)
linux

linux kernel · 5.18 · update rc1
linux

Linux · 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56 to before f5064531c23ad646da7be8b938292b00a7e61438, 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56 to before 63ea57478aaa3e06a597081a0f537318fc04e49f, 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56 to before 907c97986d6fa77318d17659dd76c94b65dd27c5, 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56 to before dcd689f9e2640c992f94eae9955b106f71c6825d, 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56 to before f8db5743d09523c0bb35f16e13691e3b7eb5dba0, 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56 to before 6bf92d70e690b7ff12b24f4bfff5e5434d019b82
Linux

Linux · 5.3
Linux

Component: Not specified by the source
File: net/ipv4/fib_semantics.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.