Skip to main content
Public proof of conceptFix available

CVE-2022-0435

A public proof of concept exists; no exploitation attested.

  • Published2022-03-25
  • Fixed in5.16.9 · 5.15.23 · 5.10.100 · 5.4.179 · 4.19.229 · 4.14.266
  • WeaknessCWE-787

Am I affected?

With a domain, we read the version its public headers and pages expose. A distribution build can carry the fix under an older number.

Description

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Timeline

dates in UTC
  1. 2022-03-2519:15CVE publishedNVD

Observed activity

isMalicious corpus · updated 2026-11-04 09:37 UTC
Indicators tagged with this CVE, per day0 indicators over 7 days
Block these indicators
  • Firewall list (EDL, text): https://api.ismalicious.com/edl/cve/CVE-2022-0435?format=txt
  • CSV export: https://api.ismalicious.com/edl/cve/CVE-2022-0435?format=csv
  • TAXII collection of exploited CVEs
  • The EDL and CSV take an API key on the Pro plan.

Versions per branch

NVD
Linux linux kernel
BranchAffectedFixed in
5.16≥ 5.16, < 5.16.95.16.9
5.x≥ 5.11, < 5.15.235.15.23
5.x≥ 5.5, < 5.10.1005.10.100
5.4≥ 4.20, < 5.4.1795.4.179
4.x≥ 4.15, < 4.19.2294.19.229
4.x≥ 4.10, < 4.14.2664.14.266
4.x≥ 4.8, < 4.9.3014.9.301
5.17= 5.17no fix published
Fedoraproject fedora
BranchAffectedFixed in
34.x= 34no fix published
35.x= 35no fix published
Redhat codeready linux builder
BranchAffectedFixed in
8.0= 8.0no fix published
8.4= 8.4no fix published

27 more products in the sources.

as publishedRanges as NVD and OSV publish them; a distribution’s build can be fixed under an older number.

Distribution builds and vendor advisories

Packages from OSV.dev and products from the vendors' CSAF advisories.

version not verifiedVersions not verified: read as OSV.dev and the vendors publish them, not checked against each vendor's release list.

Packages

  • :linux_kernel:Androidfrom :0 · fixed in :2022-08-05
  • dtb-aarch64openSUSE:Leap 15.3all versions · fixed in 5.3.18-150300.59.49.1and 11 other packages
  • kernelTuxCare:CentOS:8.5all versions · fixed in 4.18.0-348.7.1.el8_5.tuxcare.els2and 21 other packages
  • kernelTuxCare:CentOS:8.5all versions · fixed in 4.18.0-348.7.1.el8_5.tuxcare.els4and 21 other packages
  • kernelTuxCare:CentOS:8.5all versions · fixed in 4.18.0-348.7.1.el8_5.tuxcare.els6and 21 other packages
  • kernelTuxCare:CentOS:8.4all versions · fixed in 4.18.0-305.25.1.el8_4.tuxcare.els2and 21 other packages
  • kernelRocky Linux:8all versions · fixed in 0:4.18.0-348.20.1.el8_5
  • kernelRed Hat:rhel_eus:8.4::baseosall versions · fixed in 0:4.18.0-305.40.1.el8_4and 32 other packages

256 more package ranges on OSV.dev

Vendor advisories

  • CVE-2022-0435 Red Hat Product Security744 products fixed

    kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS

  • SSA-202008 Siemens ProductCERT11 known affected

    SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.0

    RUGGEDCOM ROX MX5000 · RUGGEDCOM ROX MX5000RE · RUGGEDCOM ROX RX1400 · +8 more

  • RHSA-2022:1619 Red Hat Product Security70 products fixed

    Red Hat Security Advisory: kpatch-patch security update

  • RHSA-2022:1589 Red Hat Product Security47 products fixed

    Red Hat Security Advisory: kernel security update

  • RHSA-2022:1213 Red Hat Product Security120 products fixed

    Red Hat Security Advisory: kernel security update

  • RHSA-2022:1209 Red Hat Product Security30 products fixed

    Red Hat Security Advisory: kernel-rt security and bug fix update

8 more advisories

Full record on NVD

Fix

  1. Update Linux linux kernel to 5.16.9 · 5.15.23 · 5.10.100 · 5.4.179 · 4.19.229 · 4.14.266 · 4.9.301
  2. Vendor fix Siemens ProductCERT SSA-202008 · 11 productsUpdate to V2.17.0 or later version
  3. Vendor fix Red Hat Product Security RHSA-2022:1619 · 70 productsFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
  4. Vendor fix Red Hat Product Security RHSA-2022:1589 · 47 productsFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
  5. Vendor fix Red Hat Product Security RHSA-2022:0841 · 2 productsFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
  6. Workaround from the vendor Red Hat Product Security RHSA-2022:1619 · 70 productsThe TIPC module will NOT be automatically loaded. When required, administrative action is needed to explicitly load this module. Loading the module can be prevented with the following instructions: # echo "install tipc /bin/true" >> /etc/modprobe.d/disable-tipc.conf The system will need to be res…

Advisories and patches

Detection

read 2026-11-03 22:42 UTC
Nuclei template
none so far
ProjectDiscovery
Exploit-DB
no entry
Exploit-DB
Proof-of-concept repositories
3 repositories, unverifiedwlswotmd/CVE-2022-0435Spydomain/CVE-2022-0435-Pocsandesh9978/CVE-2022-0435
PoC-in-GitHub
Metasploit modules
none listed
Metasploit Framework

Sources

  • NVDCVSS 3.18.8read 2026-10-23
  • NVDCVSS 2.09read 2026-10-23
  • CNAweakness (CWE)CWE-787known since 2026-10-23
  • NVDweakness (CWE)CWE-787read 2026-10-23
  • FIRST EPSSEPSS score67.8 %read 2026-11-03
  • PoC-in-GitHubproof of concept3read 2026-11-03
  • OSVaffected packages—

Identifiers

Technical details

CVSS v3 Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
2022-03-25
Last Modified
2026-06-17
NVD status
Modified

Frequently asked questions

What is CVE-2022-0435?

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

Is CVE-2022-0435 actively exploited?

Active exploitation of CVE-2022-0435 has not been confirmed. Its EPSS score was 67.8% on 2026-11-03, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-0435?

CVE-2022-0435 has a CVSS v3 base score of 8.8 (HIGH severity), with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Running Linux kernel? Hear about its next vulnerability

Surveillance reads the versions in your stack — a domain, a lockfile or a list — checks each CVE against the ranges its sources publish, and alerts you when one you run is exploited or enters CISA KEV. A version it cannot read stays « version not verified ».

Get alerts for this productCISA KEV additions, November 2026Search CVEs

No credit card required · No monthly cap on website lookups · 250 API requests/month

Go further

Related vulnerabilities

Same product first, then the same vendor advisory and the same publication week.

Back to CVE Database

Sources for this record