cbcvebase.
CVE-2022-3566
published 2022-10-17

CVE-2022-3566: A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP…

high7.1CVSS 3.1
AVAACHPRLUINSUCHIHAH
A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability.

Affected

9 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.4-1 (bookworm)linux 6.1.4-1 (bookworm)
linuxkernel
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 4.15.0-200.2114.15.0-200.211
linuxlinux_kernel>= 0 < 5.4.0-135.1525.4.0-135.152
linuxlinux_kernel>= 0 < 5.15.0-56.625.15.0-56.62
linuxlinux_kernel>= 0 < 4.4.0-235.2694.4.0-235.269

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
cisa8.6HIGH