Lucene search

K
osvGoogleOSV:USN-5266-1
HistoryFeb 03, 2022 - 4:13 a.m.

linux-gke, linux-gke-5.4 vulnerabilities

2022-02-0304:13:54
Google
osv.dev
12
linux kernel
packet network protocol
firedtv firewire driver
vulnerabilities
denial of service
arbitrary code

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

29.5%

It was discovered that the Packet network protocol implementation in the
Linux kernel contained a double-free vulnerability. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2021-22600)

Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel
did not properly perform bounds checking in some situations. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2021-42739)