CVE-2022-28893

Updated: 2024-06-15 21:15:07.852044

Description:

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x HIGH 7.2
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Already Fixed 2024-01-19 03:07:40
AlmaLinux 9.2 FIPS kernel 5.14.0 7.8 HIGH Already Fixed 2024-01-19 03:06:36
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-04-15 07:03:52
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1686585068 2023-06-13 09:13:13
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1686651204 2023-06-13 09:13:14
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-04-15 07:03:52
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-04-15 07:03:52
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Not Vulnerable 2022-04-15 07:03:52
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Not Vulnerable 2022-10-04 14:02:39
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Not Vulnerable 2023-08-28 21:18:44