CVE-2022-0435
CriticalA stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.
Published Jun 24, 2024 · Updated Oct 14, 2026 · Also known as A-228560328, DEBIAN-CVE-2022-0435, PUB-A-228560328, SUSE-SU-2022:0429-1, UBUNTU-CVE-2022-0435
Key Facts
Patch immediately- CVE-2022-0435 is a critical-severity vulnerability (CVSS 9.2 v4) affecting Codeready Linux Builder (Redhat), Codeready Linux Builder Eus (Redhat), Codeready Linux Builder Eus For Power Little Endian (Redhat) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 68% probability of exploitation in the next 30 days.
- Fixed versions are available, including :linux_kernel: :2022-08-05, bpftool 4.18.0-348.20.1.el8_5, bpftool 5.10.93-5.ph4.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v4
9.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS (30-day exploit likelihood)
68%
Higher than 99.3% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2022-0435 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
Affected Products
991 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Codeready Linux BuilderRedhat | 8.0, 8.4 | n/a |
| Codeready Linux Builder EusRedhat | 8.2 | n/a |
| Codeready Linux Builder Eus For Power Little EndianRedhat | 8.2 | n/a |
| Codeready Linux Builder For Power Little Endian EusRedhat | 8.0, 8.4 | n/a |
| VirtualizationRedhat | 4.0 | n/a |
Patched Releases
:linux_kernel:
:2022-08-05
bpftool
4.18.0-348.20.1.el8_5, 5.10.93-5.ph4
cluster-md-kmp-64kb
5.3.18-150300.59.49.1
cluster-md-kmp-azure
5.3.18-150300.38.40.4
cluster-md-kmp-default
4.12.14-122.110.1, 4.12.14-122.222.1, 4.12.14-150.83.1, 4.12.14-95.88.1, 5.3.18-150200.24.197.1, 5.3.18-150300.59.167.1, 5.3.18-150300.59.49.1, 5.3.18-24.102.1
cluster-md-kmp-preempt
5.3.18-150300.59.49.1
cluster-md-kmp-rt
4.12.14-10.78.1
dlm-kmp-64kb
5.3.18-150300.59.49.1
dlm-kmp-azure
5.3.18-150300.38.40.4
dlm-kmp-default
4.12.14-122.110.1, 4.12.14-122.222.1, 4.12.14-150.83.1, 4.12.14-95.88.1, 5.3.18-150200.24.197.1, 5.3.18-150300.59.167.1, 5.3.18-150300.59.49.1, 5.3.18-24.102.1
dlm-kmp-preempt
5.3.18-150300.59.49.1
dlm-kmp-rt
4.12.14-10.78.1
dtb-al
5.3.18-150300.59.49.1
dtb-allwinner
5.3.18-150300.59.49.1
dtb-altera
5.3.18-150300.59.49.1
dtb-amd
5.3.18-150300.59.49.1
dtb-amlogic
5.3.18-150300.59.49.1
dtb-apm
5.3.18-150300.59.49.1
dtb-arm
5.3.18-150300.59.49.1
dtb-broadcom
5.3.18-150300.59.49.1
dtb-cavium
5.3.18-150300.59.49.1
dtb-exynos
5.3.18-150300.59.49.1
dtb-freescale
5.3.18-150300.59.49.1
dtb-hisilicon
5.3.18-150300.59.49.1
dtb-lg
5.3.18-150300.59.49.1
Timeline
Publicly disclosed
Jun 24, 2024
Last updated
Oct 14, 2026
Weakness Type
- CWE-787 Out-of-bounds Write
References
- advisoryhttp://access.redhat.com/errata/RHSA-2022:0824
- advisoryhttp://bugzilla.redhat.com/show_bug.cgi?id=2044561
- advisoryhttp://dirtypipe.cm4all.com/
- advisoryRHSA-2022:0771
- advisoryRHSA-2022:0772
FAQ
Common Questions.
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.
Affected: Codeready Linux Builder (Redhat) versions 8.0, 8.4; Codeready Linux Builder Eus (Redhat) versions 8.2; Codeready Linux Builder Eus For Power Little Endian (Redhat) versions 8.2, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including :linux_kernel: :2022-08-05, bpftool 4.18.0-348.20.1.el8_5, bpftool 5.10.93-5.ph4.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2022-0435 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo