CVE-2022-3625 MEDIUM

CVE-2022-3625: Linux Kernel IPsec devlink.c devlink_param_get use after free

Vendor Linux
Product Kernel
Weakness CWE-119
Published October 21, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Adjacent
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211929 was assigned to this vulnerability.

Key dates

02Disclosure timeline

October 21, 2022 CVE published
August 3, 2024 Record updated