PT-2022-5202 · Linux+4 · Linux Kernel+4

Syzbot · Published 2022-09-29 · Updated 2024-01-25 · CVE-2022-3543

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to the use of memory after it has been freed in the unix sock destructor() and unix release sock() functions of the BPF subsystem in Linux operating systems. This can be exploited by a remote attacker to cause a denial of service. The problem is also associated with a memory leak in the affected functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

ALT-PU-2022-3364

ALT-PU-2022-3371

ALT-PU-2023-1023

ALT-PU-2023-1064

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-11134

BDU:2022-06459

CVE-2022-3543

MGASA-2022-0442

MGASA-2022-0443

USN-5793-1

USN-5793-2

USN-5793-3

USN-5793-4

USN-5851-1

USN-5860-1

USN-5876-1

USN-5877-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Ubuntu

References · 66

• https://advisories.mageia.org/MGASA-2022-0442.html · Security Note
• https://ubuntu.com/security/notices/USN-5860-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45934 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42895 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5860-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5851-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5851-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20421 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3628 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-41849 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5793-3 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0426SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2663 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory