CVE-2022-3567

CWE-362 — Race ConditionCWE-42121 documents7 sources
Severity
6.4MEDIUM
EPSS
0.0%
top 93.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Linux Kernel
Timeline
PublishedOct 17
Latest updateMar 3

Description

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.2 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5linux/kerneln/a
▶Debianlinux< 6.1.4-1+2

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-74xp-vm35-rpjw: A vulnerability has been found in Linux Kernel and classified as problematic↗2022-10-18
▶
OSV
CVE-2022-3567: A vulnerability has been found in Linux Kernel and classified as problematic↗2022-10-17
▶
CVEList
Linux Kernel IPv6 inet6_dgram_ops race condition↗2022-10-17
▶

📋Vendor Advisories

17
Ubuntu
Linux kernel (OEM) vulnerabilities↗2023-03-03
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2023-01-05
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2022-12-14
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2022-12-12
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2022-12-12
▶
CVE-2022-3567 (MEDIUM CVSS 6.4) | A vulnerability has been found in L | cvebase.io