CVE-2022-4269

Updated: 2025-08-20 00:06:59.508027

Description:

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-04-05 08:45:18 Ignored due to low severity
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1701963303 2023-12-07 16:19:01
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1701962635 2023-12-07 16:19:01
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-04-05 08:45:19 Ignored due to low severity
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-04-05 08:45:18 Ignored due to low severity
Oracle Linux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-12-18 19:38:06
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Released CLSA-2023:1695144235 2023-09-19 17:07:01
Ubuntu 18.04 ELS linux 4.15.0 5.5 MEDIUM Released CLSA-2023:1695041084 2023-09-18 09:29:20