CVE-2022-1012

Public on 2022-06-30
Modified on 2022-08-05
Description

Due to the small table perturb size, a memory leak flaw was found in the Linux kernel's TCP source port generation algorithm in the net/ipv4/tcp.c function. This flaw allows an attacker to leak information and may cause a denial of service.

Severity
Important
See what this means
CVSS v3 Base Score
8.2
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 kernel 2022-06-30 23:38 ALAS-2022-1604
Amazon Linux 2 - Core kernel 2022-07-06 03:13 ALAS2-2022-1813
Amazon Linux 2 - Kernel-5.10 Extra kernel 2022-06-30 22:29 ALAS2KERNEL-5.10-2022-015
Amazon Linux 2 - Kernel-5.4 Extra kernel 2022-06-30 22:29 ALAS2KERNEL-5.4-2022-028

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
NVD CVSSv3 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H