CVE-2022-21385

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Oracle Corporation	Oracle Linux	*

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea010070d0a7497253d5a6f919f6dd107450b31aExploit, Mailing List, Patch, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea010070d0a7497253d5a6f919f6dd107450b31aExploit, Mailing List, Patch, Third Party Advisory

Timeline

Published: Aug 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-213866.1Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affe CVE-2022-213875.3Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that CVE-2022-213883.3Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Instal CVE-2022-2138910.0Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti CVE-2022-21399.8The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary co CVE-2022-2139010.0Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Webservi CVE-2022-213919.9Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti CVE-2022-213928.8Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions CVE-2022-213934.3Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. CVE-2022-213946.5Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prio CVE-2022-213957.2Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported vers CVE-2022-213965.4Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported vers