CVE-2022-0435

HIGH

8.8

CVSS Score

Published: March 25, 2022 at 12:00 AM UTC

Updated: June 17, 2026 at 04:20 AM UTC

38 products affected across 5 vendorsLinux KernelFedoraEnterprise Linux

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 68%

Description

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fedora · Fedora Projectrpm

95%

34 35

Linux Kernel · Linux

95%

4.10 ≤ v < 4.14.2664.15 ≤ v < 4.19.2294.20 ≤ v < 5.4.1794.8 ≤ v < 4.9.3015.11 ≤ v < 5.15.235.16 ≤ v < 5.16.95.5 ≤ v < 5.10.1005.17 5.17 rc1 5.17 rc2 5.17 rc3

Affected range stops below 4.14.266, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.229, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.301, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.100, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.23, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.16.9, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.179, so it looks safe — our inference, not a vendor statement

H300E Firmware · NetAppdrupal

95%

All versions

netapp-h300e (same device)

H300S Firmware · NetAppdrupal