What is CVE-2022-0168?

CVE-2022-0168 is a medium-severity vulnerability affecting the Linux kernel's smb2_ioctl_query_info function in the Common Internet File System (CIFS). This denial of service (DOS) issue allows a local, privileged attacker to crash the system. Systems running the Linux kernel with affected versions of the smb2_ioctl_query_info function, as well as those running affected versions of the kernel package in Red Hat products, are vulnerable to this issue. The vulnerability is particularly relevant for users who are not well-versed in security vulnerabilities, as it can impact system stability and performance.

Who is impacted by this?

The users of Red Hat Enterprise Linux 8.0 and 9.0 are also impacted. This security flaw can lead to a denial of service (DOS) attack, allowing an attacker to crash the system. It is important for users to be aware of this vulnerability, as it can impact system stability and performance.

What to do if CVE-2022-0168 affected you

If you're affected by the CVE-2022-0168 vulnerability, it's important to take action to protect your system. Here are some simple steps to follow:

1. Monitor the Red Hat Customer Portal for updates and potential fixes related to this vulnerability.

2. Consider applying the patch provided to address the vulnerability, if you're comfortable with modifying the Linux kernel source code.

3. Stay informed about security advisories and updates for your specific Linux distribution and kernel version.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

CVE-2022-0168, a medium-severity vulnerability in the Linux kernel, is not listed in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, discovered on August 26, 2022, affects the smb2_ioctl_query_info function and can lead to a denial of service attack. No specific due date or required action is mentioned, but users should monitor security advisories and updates for their Linux distribution and kernel version.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-476, a NULL Pointer Dereference issue in the Linux kernel's smb2_ioctl_query_info function.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources below.

• Red Hat Customer Portal

• Red Hat Product Errata

• Linux kernel source tree patch