CVE-2022-4129

Publication date

2022-11-28 00:00:00

Family

redhat

State

PUBLISHED

Description

A flaw was found in the Linux kernels Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.