CVE Feed

    Dashboard / CVE / CVE-2022-21504

    CVE-2022-21504

    The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socket to be closed and freed while it was still in use by another portion of the kernel. An attack with local access can operate on the socket, and cause a denial of service. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    Published:Jun 14, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 14, 2022
    EPSS Score:0.00205
    CVSS Score:5.5

    Affected Products

    Vendor
    Oracle
    Product
    Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-35233 (CVSS 4.4) — An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range…
    CVE-2026-21996 (CVSS 3.3) — An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to…
    CVE-2026-21991 (CVSS 5.5) — A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.…
    CVE-2025-4598 (CVSS 4.7) — A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash a…
    CVE-2023-22024 (CVSS 5.5) — In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESE…
    CVE-2022-21385 (CVSS 6.2) — A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CV…
    CVE-2022-21505 (CVSS 6.7) — In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated…
    CVE-2022-21499 (CVSS 6.7) — KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An a…
    CVE-2021-2464 (CVSS 7.8) — Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily…
    CVE-2021-3551 (CVSS 7.8) — A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credenti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High