CVE-2022-3028High· 7.0▾ TwilightA race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.2%
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
linux_kernel >= 3.14, < 4.9.327linux_kernel >= 4.10, < 4.14.292linux_kernel >= 4.15, < 4.19.257linux_kernel >= 4.20, < 5.4.212linux_kernel >= 5.5, < 5.10.140linux_kernel >= 5.11, < 5.15.64linux_kernel >= 5.16, < 5.19.6linux_kernel = 6.0fedora = 35fedora = 36fedora = 37debian_linux = 10.0Upgrade past the affected range:
linux_kernel 5.19.6Connected by shared product, vendor, weakness, or advisory.
CVE-2022-3303Medium· 4.7A race condition flaw was found in the Linux kernel sound subsystem due to improper locking
CVE-2022-3635Medium· 5.5A vulnerability, which was classified as critical, has been found in Linux Kernel
CVE-2022-1462Medium· 6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem
CVE-2021-33655Medium· 6.7When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVE-2022-3625Medium· 4.6A vulnerability was found in Linux Kernel
CVE-2022-3586Medium· 5.5A flaw was found in the Linux kernel’s networking code