CVE-2022-3649

LOW 3.1

Linux Kernel BPF inode.c nilfs_new_inode use after free

CVSS Score

3.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.

CWE	CWE-119
Vendor	linux
Product	kernel
Ecosystems	Linux Kernel
Industries	Technology
Published	Oct 21, 2022
Last Updated	Aug 3, 2024

Stay Ahead of the Next One

Get instant alerts for linux kernel

Be the first to know when new low vulnerabilities affecting linux kernel are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected Versions

Linux / Kernel

n/a

References

NVD ↗ CVE.org ↗ EPSS Data ↗

git.kernel.org: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d325dc6eb763c10f591c239550b8c7e5466a5d09 vuldb.com: https://vuldb.com/?id.211992 lists.debian.org: https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html lists.debian.org: https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html security.netapp.com: https://security.netapp.com/advisory/ntap-20230214-0009/