NULL Pointer Dereference Affecting rtla package, versions <0:5.14.0-362.18.1.el9_3
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ORACLE9-RTLA-6207452
- published 27 Jan 2024
- disclosed 17 Jan 2023
Introduced: 17 Jan 2023
CVE-2022-41858 Open this link in a new tabHow to fix?
Upgrade Oracle:9
rtla
to version 0:5.14.0-362.18.1.el9_3 or higher.
This issue was patched in ELSA-2024-0461
.
NVD Description
Note: Versions mentioned in the description apply only to the upstream rtla
package and not the rtla
package as distributed by Oracle
.
See How to fix?
for Oracle:9
relevant fixed versions and status.
A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.
References
- https://linux.oracle.com/cve/CVE-2022-41858.html
- https://linux.oracle.com/errata/ELSA-2023-12160.html
- https://linux.oracle.com/errata/ELSA-2024-0461.html
- https://linux.oracle.com/errata/ELSA-2024-0897.html
- https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798
- https://security.netapp.com/advisory/ntap-20230223-0006/