VDB
GHSA-8qqm-4j4m-hg7c
GHSA-8qqm-4j4m-hg7c
PUBLISHED
CVSS 3.299999952316284 LOW
Record from GitHub Advisory Database · Published May 24, 2022
ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
Risk scores
CVSS 3.1
3.299999952316284
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Timeline
- May 24, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-8qqm-4j4m-hg7c
vulnetix vdb fixes GHSA-8qqm-4j4m-hg7cOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-8qqm-4j4m-hg7c/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e69dbd4619e7674c1679cba49afd9dd9ac347eef url
- https://usn.ubuntu.com/4186-2 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-17053 advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b url
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html url
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T url
- https://usn.ubuntu.com/4185-1 url
- https://usn.ubuntu.com/4185-2 url
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html url
- https://seclists.org/bugtraq/2019/Nov/11 url
- https://usn.ubuntu.com/4184-1 url
- https://usn.ubuntu.com/4186-1 url