CVE-2022-3534
published 2022-10-17CVE-2022-3534: A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the…
high8CVSS 3.1
AVAACLPRLUINSUCHIHAH
A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libbpf | < libbpf 1.1.0-1 (bookworm) | libbpf 1.1.0-1 (bookworm) |
| libbpf_project | libbpf | >= 0 < 0.3-2+deb11u1 | 0.3-2+deb11u1 |
| libbpf_project | libbpf | >= 0 < 1.1.0-1 | 1.1.0-1 |
| libbpf_project | libbpf | >= 0 < 1.1.0-1 | 1.1.0-1 |
| libbpf_project | libbpf | >= 0 < 1.1.0-1 | 1.1.0-1 |
| libbpf_project | libbpf | >= 0 < 0.5.0-1ubuntu22.04.1 | 0.5.0-1ubuntu22.04.1 |
| libbpf_project | libbpf | >= 0 < 0.5.0-1~ubuntu20.04.1+esm1 | 0.5.0-1~ubuntu20.04.1+esm1 |
| linux | kernel | — | — |
CVSS provenance
nvdv3.18.0HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.0HIGH