CVE-2022-3545CWE-119

CVE-2022-3545

Medium · published October 17, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00438 · 36.7th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2022-10-17T16:15Z
Affected products (12)
ProductVersionsFixed in
linux/linux_kernel≥ 4.11, < 4.14.3034.14.303
linux/linux_kernel≥ 4.15, < 4.19.2704.19.270
linux/linux_kernel≥ 4.20, < 5.4.2285.4.228
linux/linux_kernel≥ 5.5, < 5.10.1605.10.160
linux/linux_kernel≥ 5.11, < 5.15.845.15.84
netapp/h410c_firmwareall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h410s_firmwareall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (14)
EPSS history
Timeline
  • 17 OCT 00:00Z
    Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free
    cvelistv5