VDB
GHSA-x652-hrc4-qr9w
GHSA-x652-hrc4-qr9w
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published April 3, 2022
In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- Apr 3, 2022 CVE Published
- Apr 9, 2026 Security Advisory (3 in total, the first dated here)
- Apr 29, 2026 Distribution Patch (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-x652-hrc4-qr9w
vulnetix vdb fixes GHSA-x652-hrc4-qr9wOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-x652-hrc4-qr9w/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://security.netapp.com/advisory/ntap-20220506-0006 url
- https://nvd.nist.gov/vuln/detail/CVE-2022-28356 advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1 url
- http://www.openwall.com/lists/oss-security/2022/04/06/1 url
- https://github.com/torvalds/linux/commit/764f4eb6846f5475f1244767d24d25dd86528a4a fix
- https://www.debian.org/security/2022/dsa-5127 advisory
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html advisory
- https://www.debian.org/security/2022/dsa-5173 advisory