CVE-2022-36879Medium· 5.5▾ SunlitAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
linux_kernel <= 5.18.14debian_linux = 10.0debian_linux = 11.0a700s_firmwareactive_iq_unified_managere-series_santricity_os_controller >= 11.0, <= 11.50.2hci_bootstrap_osaff_8300_firmwarefas_8300_firmwareaff_8700_firmwarefas_8700_firmwareaff_a400_firmwarefas_a400_firmwareaff_a250_firmwarefas_a250_firmwarefas_500f_firmwareaff_500f_firmwareh300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwareh610c_firmwareh610s_firmwareh615c_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-36946High· 7.5nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_p…
CVE-2023-5178High· 8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel
CVE-2023-3338Medium· 6.5A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol
CVE-2022-3649Low· 3.1A vulnerability was found in Linux Kernel
CVE-2023-3141High· 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel
CVE-2022-43945High· 7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow