CVE intelligence

CVE-2022-1205

Vulnerability intelligence

Published Aug 31, 2022Sources checked Nov 3, 2026

4.7MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2022-1205 and is rated Medium severity with a CVSS score of 4.7. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Ubuntu Security Notices guidance

Vendor revision: Nov 3, 2026

Vendor remediation details

This update corrects flaws in the following subsystems: - USB Gadget drivers; - Networking core; - ARM32 architecture; - ARM64 architecture; - OpenRISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Speakup Console Speech Driver; - ACPI drivers; - Serial ATA and Parallel ATA drivers; - Auxiliary display drivers; - Drivers core; - Bluetooth drivers; - Character device driver; - TPM device driver; - Clock framework and drivers; - Clocksource drivers; - CPU frequency scaling framework; - Hardware crypto device drivers; - Buffer Sharing and Synchronization framework; - DMA engine subsystem; - EDAC drivers; - ARM SCMI message protocol; - ARM SCPI message protocol; - Google firmware drivers; - FPGA Framework; - GPI

Ubuntu Security Notices guidance

Vendor revision: Nov 3, 2026

Vendor remediation details

This update corrects flaws in the following subsystems: - USB Gadget drivers; - Networking core; - User-space API (UAPI); - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - OpenRISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; - Speakup Console Speech Driver; - ACPI drivers; - Android drivers; - Serial ATA and Parallel ATA drivers; - Auxiliary display drivers; - Drivers core; - DRBD Distributed Replicated Block Device drivers; - Rados block device (RBD) driver; - Bluetooth drivers; - Cdrom driver; - Character device driver; - Hardware random number generator core; - TPM device driver; - Clock framework and drivers; - Clocksource drivers; - Data acq

Ubuntu Security Notices guidance

Vendor revision: Nov 3, 2026

Vendor remediation details

This update corrects flaws in the following subsystems: - USB Gadget drivers; - ARM32 architecture; - ARM64 architecture; - OpenRISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Speakup Console Speech Driver; - ACPI drivers; - Serial ATA and Parallel ATA drivers; - Auxiliary display drivers; - Drivers core; - Bluetooth drivers; - Character device driver; - TPM device driver; - Clock framework and drivers; - Clocksource drivers; - CPU frequency scaling framework; - Hardware crypto device drivers; - DMA engine subsystem; - EDAC drivers; - Google firmware drivers; - FPGA Framework; - GPIO subsystem; - GPU drivers; - HID subsystem; - HSI subsystem; - Hardware monitoring drivers; - CoreSight HW tracing drivers;

CISA KEVNot listedBased on the latest collected catalog

EPSS0.4%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2022-1205?

A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

Source: NVD