Technical Severity
MEDIUM
CVSS v3.1 Metrics
6.6
/ 10
Minimal Risk
Critical
Vector Specification
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H
Exploitation Likelihood
EPSS Prediction
0.15
%
Predictive Probability
Percentile Rank
36.3
th
Documented as more likely to be exploited than 36.3% of known CVEs.
Detection Date
Apr 11, 2022
Remediation Due
May 02, 2022
CISA Catalog Active
Threat Analysis
Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.
Remediation Directive
Apply updates per vendor instructions.