Severity
High
Analysis Summary
CVE-2022-0742
Linux Kernel is vulnerable to a denial of service, caused by a memory leak flaw in the igmp6_event_query() and igmp6_event_report() functions. By sending specially-crafted icmp6 messages of type 130 or 131, a remote attacker could exploit this vulnerability to cause an out-of-memory on the host system, and results in a denial of service condition.
Impact
- Denial of Service
Indicators Of Compromise
CVE
- CVE-2022-0742
Affected Vendors
- Linux
Affected Products
- Linux Kernel 5.15
- Linux Kernel 5.16
Remediation
Refer to Linux Kernel Advisory for patch, upgrade, or suggested workaround information.