CVE-2022-1678: Linux Kernel

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.

Affected products

• Linux Linux Kernel: from 4.18, up to and including 4.19
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Bootstrap OS: affected versions not specified
• Netapp Cloud Volumes Ontap Mediator: affected versions not specified
• Netapp E-Series Santricity OS Controller: from 11.0, up to and including 11.70.2
• Netapp Element Software: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified
• Netapp Storagegrid: affected versions not specified

Published 2022-05-25. Last modified 2026-06-17.