cbcvebase.
CVE-2022-3524
published 2022-10-16

CVE-2022-3524: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the…

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.

Affected

14 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.0.7-1 (bookworm)linux 6.0.7-1 (bookworm)
linuxkernel
linuxlinux_kernel< 2.6.122.6.12
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.158-15.10.158-1
linuxlinux_kernel>= 0 < 6.0.7-16.0.7-1
linuxlinux_kernel>= 0 < 6.0.7-16.0.7-1
linuxlinux_kernel>= 0 < 6.0.7-16.0.7-1
linuxlinux_kernel>= 0 < 4.15.0-200.2114.15.0-200.211
linuxlinux_kernel>= 0 < 5.4.0-135.1525.4.0-135.152
linuxlinux_kernel>= 0 < 5.15.0-56.625.15.0-56.62
linuxlinux_kernel>= 0 < 4.4.0-235.2694.4.0-235.269
paloaltopan-os

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH