CVE-2022-4378: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

• Linux Linux Kernel: from 4.9.0, up to and including 4.9.337; from 4.14.0, up to and including 4.14.302; from 4.19.0, up to and including 4.19.269; from 5.4.0, up to and including 5.4.228; from 5.10.0, up to and including 5.10.162; from 5.15.0, up to and including 5.15.86; …

Published 2023-01-05. Last modified 2026-06-17.