A Linux kernel vulnerability (CVE-2022-0742) has been discovered, allowing available memory to be exhausted and a denial of service to be remotely triggered through specially crafted icmp6 packets. The issue is related to a memory leak occurring during the processing of ICMPv6 messages with types 130 or 131.
The issue manifests starting from kernel 5.13 and is resolved in releases 5.16.13 and 5.15.27. The problem did not affect the stable branches of Debian, SUSE, Ubuntu LTS (18.04, 20.04), and RHEL, is fixed in Arch Linux, but remains unpatched in Ubuntu 21.10 and Fedora Linux.
Forrás: opennet.ru
