CVE-2022-3545
גבוהה 7.8
תיאור (מקור, אנגלית)
A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-19/10/2026
- CWE
- CWE-119
מוצרים מושפעים
linux: linux kernel; netapp: h410c firmware; netapp: h410c; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware; netapp: h410s; debian: debian linux
קישורים
- https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit… Patch
- https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit… Patch
- https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html Mailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20221223-0003/ Third Party Advisory
- https://vuldb.com/?id.211045 Third Party Advisory
- https://www.debian.org/security/2023/dsa-5324 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html Mailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20221223-0003/ Third Party Advisory