5.5
Moyenne
CVE-2022-21504 The code in UEK6 U3 was missing an appropiate file descriptor count to be missing
Description
The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socket to be closed and freed while it was still in use by another portion of the kernel. An attack with local access can operate on the socket, and cause a denial of service. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Linux | Versions non publiées |
Autres CVE de Oracle Linux
Les 10 CVE de Oracle Linux →
CVE-2026-35233
An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link…
4.4
Moyenne
CVE-2026-21996
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an…
3.3
Faible
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names
5.5
Moyenne
CVE-2022-21505
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with…
6.7
Moyenne