CVE-2022-41858

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-416 CWE-476

Affected software

Vendor	Product	Versions
n/a	Linux kernel	unknown

References

https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230223-0006/Third Party Advisory
https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230223-0006/Third Party Advisory

Timeline

Published: Jan 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-418597.5In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantiall CVE-2022-41864.3Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to CVE-2022-418607.5In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionari CVE-2022-418616.5A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server t CVE-2022-418623.7In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.CVE-2022-41876.5Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesyste CVE-2022-418707.2AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.CVE-2022-418718.8SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in th CVE-2022-418735.4Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Ou CVE-2022-418744.7Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an CVE-2022-418759.8A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON CVE-2022-418765.3ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject t