CVE-2022-4129
kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products