CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux. It may lead to a denial-of-service condition.
CVE
CVE-2022-4129
Severity
MEDIUM
CVSS
5.5
EPSS
0.17%
Linux
Original NVD Description
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)