cbcvebase.
CVE-2022-3545
published 2022-10-17

CVE-2022-3545: A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

Affected

18 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debianlinux< linux 6.0.2-1 (bookworm)linux 6.0.2-1 (bookworm)
linuxkernel
linuxlinux_kernel>= 0 < 5.10.162-15.10.162-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 4.15.0-206.2174.15.0-206.217
linuxlinux_kernel>= 0 < 5.4.0-144.1615.4.0-144.161
linuxlinux_kernel>= 0 < 5.15.0-67.745.15.0-67.74
linuxlinux_kernel>= 4.11 < 4.14.3034.14.303
linuxlinux_kernel>= 4.15 < 4.19.2704.19.270
linuxlinux_kernel>= 4.20 < 5.4.2285.4.228
linuxlinux_kernel>= 5.11 < 5.15.845.15.84
linuxlinux_kernel>= 5.5 < 5.10.1605.10.160
msrccbl2_kernel_5.15.86.1-1_on_cbl_mariner_2.0
msrccm1_kernel_5.10.161.1-1_on_cbl_mariner_1.0

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH