CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 11.0 | 11.0.x |
| linux / linux_kernel | 5.1 | 5.4.196 |
| linux / linux_kernel | 5.5 | 5.10.117 |
| linux / linux_kernel | 5.11 | 5.15.41 |
| linux / linux_kernel | 5.16 | 5.16.20 |
| linux / linux_kernel | 5.17 | 5.17.3 |
- http://www.openwall.com/lists/oss-security/2022/04/11/3
- http://www.openwall.com/lists/oss-security/2022/04/11/4
- http://www.openwall.com/lists/oss-security/2022/04/11/5
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1a3b1bba7c7a5eb8a11513cf88427cb9d77bc60a
- https://security.netapp.com/advisory/ntap-20220526-0002/
- https://www.debian.org/security/2022/dsa-5161
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime