Vulnerability · Published Jun 14, 2022 · Assigned by oracle
CVE-2022-21504
Medium 5.5
In plain English
A medium-severity security flaw in Oracle Linux from Oracle Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Official description
The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socket to be closed and freed while it was still in use by another portion of the kernel. An attack with local access can operate on the socket, and cause a denial of service. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Oracle Linux | Oracle Linux: 7Oracle Linux: 8 |