CVE-2022-3526
published 2022-10-16CVE-2022-3526: A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file…
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.94%
57.3th percentile
A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.6-1 (bookworm) | linux 5.17.6-1 (bookworm) |
| linux | kernel | — | — |
| linux | linux_kernel | >= 0 < 5.17.6-1 | 5.17.6-1 |
| linux | linux_kernel | >= 0 < 5.17.6-1 | 5.17.6-1 |
| linux | linux_kernel | >= 0 < 5.17.6-1 | 5.17.6-1 |
| linux | linux_kernel | >= 5.13 < 5.15.35 | 5.15.35 |
| linux | linux_kernel | >= 5.16 < 5.17.4 | 5.17.4 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: A flaw in macvlan_handle_frame in drivers/net/macvlan.c may cause a memory leak
vendor_redhat·2022-04-13·CVSS 5.3
CVE-2022-3526 [MEDIUM] CWE-401 kernel: A flaw in macvlan_handle_frame in drivers/net/macvlan.c may cause a memory leak
kernel: A flaw in macvlan_handle_frame in drivers/net/macvlan.c may cause a memory leak
A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.
A flaw was found in macvlan_handle_frame in drivers/net/macvlan.c in skb in the Linux Kernel. This issue may allow an attacker on the network to cause a memory leak problem.
Statement: No shipped kernel versions were seen affected with this problem. The affected patch was not consumed on RHEL8 or below kernel.
Mitigation: Mitigation for
Debian
CVE-2022-3526: linux - A vulnerability classified as problematic was found in Linux Kernel. This vulner...
vendor_debian·2022·CVSS 5.3
CVE-2022-3526 [MEDIUM] CVE-2022-3526: linux - A vulnerability classified as problematic was found in Linux Kernel. This vulner...
A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.
Scope: local
bookworm: resolved (fixed in 5.17.6-1)
bullseye: resolved
forky: resolved (fixed in 5.17.6-1)
sid: resolved (fixed in 5.17.6-1)
trixie: resolved (fixed in 5.17.6-1)
GHSA
GHSA-ffmj-8phg-m99p: A vulnerability classified as problematic was found in Linux Kernel
ghsa_unreviewed·2022-10-17
CVE-2022-3526 [HIGH] CWE-401 GHSA-ffmj-8phg-m99p: A vulnerability classified as problematic was found in Linux Kernel
A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.
OSV
CVE-2022-3526: A vulnerability classified as problematic was found in Linux Kernel
osv·2022-10-16·CVSS 7.5
CVE-2022-3526 [HIGH] CVE-2022-3526: A vulnerability classified as problematic was found in Linux Kernel
A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-16
Published