What is CVE-2022-28199?

CVE-2022-28199 is a medium-severity vulnerability in Linux Linux_kernel, classified under Improper Validation of Specified Quantity in Input. CVSS score: 6.5/10. Published 2022-09-01.

How severe is CVE-2022-28199?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Improper input validation in Linux Linux_kernel

CVE-2022-28199

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact t…

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux Linux_kernel
Microsoft Windows
Nvidia Data_plane_development_kit
Nvidia Flare — versions mlnx_dpdk_19.11_1.*.* through mlnx_dpdk_20.11_1.0.0-4.*.*

Weakness classification (CWE)

References

psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)
psirt@nvidia.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
psirt@nvidia.com (x_refsource_CISCO, vendor-advisory)

Frequently asked questions

What is CVE-2022-28199?: CVE-2022-28199 is a medium-severity vulnerability in Linux Linux_kernel, classified under Improper Validation of Specified Quantity in Input. CVSS score: 6.5/10. Published 2022-09-01.
How severe is CVE-2022-28199?: Medium severity. CVSS v3 base score is 6.5 out of 10.