CoreCVE
Back

HIGH

kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS

Published Mar 25, 2022

Description

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Affected products

Remediation

Red Hat statement

Red Hat recommends to use TIPC Encryption to secure TIPC procotol's payload or use transport level to separate and/or secure (by both encrypting and authenticating via eg. IPSec/MACSec) the communication between nodes.

Red Hat mitigation

The TIPC module will NOT be automatically loaded. When required, administrative action is needed to explicitly load this module. Loading the module can be prevented with the following instructions: # echo "install tipc /bin/true" >> /etc/modprobe.d/disable-tipc.conf The system will need to be restarted if the tipc module is loaded. In most circumstances, the TIPC kernel module will be unable to be unloaded while any network interfaces are active and the protocol is in use. If the system requires this module to work correctly, this mitigation may not be suitable.

Metrics

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 25, 2022
Updated Aug 2, 2024
Reserved Jan 31, 2022
Link CVE-2022-0435
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-0435
Red Hat
Severity Important
Public date Feb 10, 2022
Links CVE-2022-0435 - Bugzilla