CVE-2022-1247

An issue found in linux-kernel that leads to a race condition in roseconnect(). The rose driver uses roseneigh->use to represent how many objects are using the roseneigh. When a user wants to delete a roseroute via roseioctl(), the rose driver calls rosedel_node() and removes neighbours only if their “count” and “use” are zero.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1247.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "36"
            }
        ]
    }
]