CVE-2022-28356

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2022/04/06/1Exploit, Mailing List, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1Patch, Release Notes, Vendor Advisory
https://github.com/torvalds/linux/commit/764f4eb6846f5475f1244767d24d25dd86528a4aPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0006/Third Party Advisory
https://www.debian.org/security/2022/dsa-5127Third Party Advisory
https://www.debian.org/security/2022/dsa-5173Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/04/06/1Exploit, Mailing List, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1Patch, Release Notes, Vendor Advisory
https://github.com/torvalds/linux/commit/764f4eb6846f5475f1244767d24d25dd86528a4aPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0006/Third Party Advisory
https://www.debian.org/security/2022/dsa-5127Third Party Advisory
https://www.debian.org/security/2022/dsa-5173Third Party Advisory

Timeline

Published: Apr 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-283579.8NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management accou CVE-2022-283636.1Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username param CVE-2022-283645.4Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file para CVE-2022-283655.3Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication CVE-2022-283667.5Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory CVE-2022-283676.1OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly e CVE-2022-283689.8Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (with CVE-2022-283699.8Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-op CVE-2022-28376.1A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod th CVE-2022-283707.5On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade provides a means of provisioning a firmwar CVE-2022-283717.5On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a st CVE-2022-283727.5On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a me