Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-3636

Опубликовано: 21 окт. 2022
Источник: nvd
CVSS3: 5.5
CVSS3: 7.8
CVSS2: 4.9
EPSS Низкий

Описание

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is 17a5f6a78dc7b8db385de346092d7d9f9dc24df6. It is best practice to apply a patch to resolve this issue. No released Linux Kernel version was ever affected by this CVE.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00344
Низкий

5.5 Medium

CVSS3

7.8 High

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-119
CWE-416

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

A vulnerability, which was classified as critical, was found in Linux Kernel. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211935.

CVSS3: 7.8
redhat
больше 4 лет назад

A vulnerability, which was classified as critical, was found in Linux Kernel. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211935.

CVSS3: 5.5
debian
почти 4 года назад

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f33 ...

CVSS3: 7.8
github
почти 4 года назад

A vulnerability, which was classified as critical, was found in Linux Kernel. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211935.

CVSS3: 7.8
fstec
больше 4 лет назад

Уязвимости функции __mtk_ppe_check_skb() в модуле drivers/net/ethernet/mediatek/mtk_ppe.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 27%
0.00344
Низкий

5.5 Medium

CVSS3

7.8 High

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-119
CWE-416