cbcvebase.
CVE-2022-3028
published 2022-08-31

CVE-2022-3028: A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred…

PriorityP432high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.20%
10.2th percentile
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.

Affected

33 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 5.19.6-1 (bookworm)linux 5.19.6-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
github.comtalos-systems_talos>= 0 < 1.2.01.2.0
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.140-15.10.140-1
linuxlinux_kernel>= 0 < 5.19.6-15.19.6-1
linuxlinux_kernel>= 0 < 5.19.6-15.19.6-1
linuxlinux_kernel>= 0 < 5.19.6-15.19.6-1
linuxlinux_kernel>= 0 < 4.15.0-197.2084.15.0-197.208
linuxlinux_kernel>= 0 < 5.4.0-132.1485.4.0-132.148
linuxlinux_kernel>= 0 < 5.15.0-53.595.15.0-53.59
linuxlinux_kernel>= 0 < 4.4.0-234.2684.4.0-234.268
linuxlinux_kernel>= 3.14 < 4.9.3274.9.327
linuxlinux_kernel>= 4.10 < 4.14.2924.14.292
linuxlinux_kernel>= 4.15 < 4.19.2574.19.257
linuxlinux_kernel>= 4.20 < 5.4.2125.4.212
linuxlinux_kernel>= 5.11 < 5.15.645.15.64
linuxlinux_kernel>= 5.16 < 5.19.65.19.6
linuxlinux_kernel>= 5.5 < 5.10.1405.10.140
msrccbl2_kernel_5.15.67.1-4_on_cbl_mariner_2.0
msrccbl_mariner_1.0_arm

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
ghsa7.0HIGH
osv7.0HIGH
vendor_debian7.0HIGH
vendor_msrc7.0HIGH
vendor_oracle7.0HIGH
vendor_redhat7.0HIGH
vendor_ubuntu7.0HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.