CVE-2022-1353

HIGH

7.1

CVSS Score

Published: April 29, 2022 at 03:46 PM UTC

Updated: August 5, 2026 at 10:17 PM UTC

19 products affected across 4 vendorsLinux KernelDebian LinuxEnterprise Linux

Using Kernel by N/A?

Get instant alerts when new vulnerabilities affect Kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.4%

Description

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0 11.0 9.0

Linux Kernel · Linux

95%

v < 4.9.311v < 5.174.10 ≤ v < 4.14.2764.15 ≤ v < 4.19.2384.20 ≤ v < 5.4.1895.11 ≤ v < 5.15.335.16 ≤ v < 5.16.195.5 ≤ v < 5.10.1104.10 4.15 4.20 5.11 5.16 5.17 rc1 5.17 rc2 5.17 rc3 5.17 rc4 5.17 rc5 5.17 rc6 5.17 rc7 5.17 rc8 5.5

Affected range stops below 4.14.276, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.238, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.311, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.110, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.33, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.16.19, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.17, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.189, so it looks safe — our inference, not a vendor statement

H300E Firmware · NetAppdrupal

95%

All versions

netapp-h300e (same device)