CVE-2022-1205

MEDIUM 4.7 ALL-YEARS

Published 2022-08-31 · Last modified 2024-08-02 · redhat · NVD: Modified

A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.4%chance of exploitation in 30 days · 31st percentile

○ In CISA KEV○ Catalogued PoC

Impact if exploited

4.7CVSS 3.1 · MEDIUM · NVD

ConfidentialityNone
IntegrityNone
AvailabilityHigh

What an attacker needs

⚠Access: Requires local access to the host
⚠Privileges: Requires a low-privilege account
✓User interaction: No user interaction needed
⚠Complexity: Needs a race window or specific setup

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Linux

Products Kernel Linux Kernel

Weakness (CWE)

CWE-416: - Use After Free, CWE-476 - NULL Pointer Dereference.
CWE-476: NULL pointer dereference

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References and research data (JSON)

Vendor product assessments

Showing 32 of 198 vendor product statements; 166 omitted. Read the full vendor advisory.

kernel as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-doc as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-doc
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
python-perf as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/python-perf
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-debug-devel as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-devel
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-trace as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-trace
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-tools-libs-devel
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-abi-stablelists as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-abi-stablelists
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-debug-modules as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-modules
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-ipaclones-internal
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-debug-core as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug-core
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-devel as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-devel
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt.src as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt?arch=src
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
python3-perf as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/python3-perf
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-64k-debug-core as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-64k-debug-core
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-64k-debug-modules-partner
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-64k-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-64k-modules-internal
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-debug-core as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-core
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-modules-partner
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-headers as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-headers
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-modules-partner
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-64k-debug-devel-matched as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-64k-debug-devel-matched
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-64k-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-64k-modules-internal
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-debug-devel-matched as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug-devel-matched
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug-modules-partner
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-modules-internal
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-tools-libs as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-tools-libs
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
kernel.src as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel?arch=src
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
rv as a component of Red Hat Enterprise Linux 9 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/rv
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00

Known Affected Software Configurations

Vendor	Product	Version range
Linux	Linux Kernel	≤ 5.17

References

Exploit-tagged references (not proof of a PoC)

https://www.openwall.com/lists/oss-security/2022/04/02/4 x_refsource_MISCx_transferredExploitMailing ListThird Party AdvisoryCVE record · redhat · Updated 2022-08-31T15:32:59.000Z
CVE record · CVE · Updated 2024-08-02T23:55:24.374Z
NVD · CVE-2022-1205 · Updated 2026-06-17T04:22:00.613

Patches & mitigations

https://bugzilla.redhat.com/show_bug.cgi?id=2071047 x_refsource_MISCx_transferredIssue TrackingPatchThird Party Advisoryvendor-referenceCVE record · redhat · Updated 2022-08-31T15:32:59.000Z
CVE record · CVE · Updated 2024-08-02T23:55:24.374Z
NVD · CVE-2022-1205 · Updated 2026-06-17T04:22:00.613
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
https://github.com/torvalds/linux/commit/fc6d01ff9ef03b66d4a3a23b46fc3c3d8cf92009 x_refsource_MISCx_transferredPatchThird Party Advisoryvendor-referenceCVE record · redhat · Updated 2022-08-31T15:32:59.000Z
CVE record · CVE · Updated 2024-08-02T23:55:24.374Z
NVD · CVE-2022-1205 · Updated 2026-06-17T04:22:00.613
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
https://github.com/torvalds/linux/commit/82e31755e55fbcea6a9dfaae5fe4860ade17cbc0 x_refsource_MISCx_transferredPatchThird Party Advisoryvendor-referenceCVE record · redhat · Updated 2022-08-31T15:32:59.000Z
CVE record · CVE · Updated 2024-08-02T23:55:24.374Z
NVD · CVE-2022-1205 · Updated 2026-06-17T04:22:00.613
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00

Advisories

https://access.redhat.com/security/cve/CVE-2022-1205 x_refsource_MISCx_transferredThird Party Advisoryvendor-referenceCVE record · redhat · Updated 2022-08-31T15:32:59.000Z
CVE record · CVE · Updated 2024-08-02T23:55:24.374Z
NVD · CVE-2022-1205 · Updated 2026-06-17T04:22:00.613
Red Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-1205.json vendor-advisoryRed Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24545 ADVISORYEUVD · EUVD-2022-24545

Technical & other

https://www.cve.org/CVERecord?id=CVE-2022-1205 vendor-referenceRed Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00
https://nvd.nist.gov/vuln/detail/CVE-2022-1205 vendor-referenceRed Hat · CVE-2022-1205 · Updated 2025-11-21T15:50:33+00:00

Sources: NVD · CVE.org · All sources and attribution · EPSS