PT-2022-5925 · Linux+6 · Linux Kernel+6

Published 2022-10-19 · Updated 2025-06-25 · CVE-2022-3586

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw was found in the Linux kernel's networking code, specifically a use-after-free issue in the sch sfb enqueue function. This function incorrectly uses the socket buffer (SKB) cb field after the same SKB has been enqueued and freed into a child qdisc. The issue allows a local, unprivileged user to crash the system, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2022-2922

ALT-PU-2022-2925

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-11282

BDU:2022-07345

CVE-2022-3586

DLA-3173-1

MGASA-2022-0379

MGASA-2022-0380

OESA-2022-2031

OESA-2022-2032

OESA-2022-2033

OESA-2022-2035

OESA-2022-2036

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4506-1

SUSE-SU-2022:4513-1

SUSE-SU-2022:4515-1

SUSE-SU-2022:4516-1

SUSE-SU-2022:4517-1

SUSE-SU-2022:4518-1

SUSE-SU-2022:4520-1

SUSE-SU-2022:4527-1

SUSE-SU-2022:4528-1

SUSE-SU-2022:4533-1

SUSE-SU-2022:4534-1

SUSE-SU-2022:4539-1

SUSE-SU-2022:4543-1

SUSE-SU-2022:4544-1

SUSE-SU-2022:4545-1

SUSE-SU-2022:4546-1

SUSE-SU-2022:4550-1

SUSE-SU-2022:4551-1

SUSE-SU-2022:4559-1

SUSE-SU-2022:4560-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4562-1

SUSE-SU-2022:4569-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4577-1

SUSE-SU-2022:4580-1

SUSE-SU-2022:4587-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4595-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0416-1

USN-5790-1

USN-5791-1

USN-5791-2

USN-5791-3

USN-5792-1

USN-5792-2

USN-5793-1

USN-5793-2

USN-5793-3

USN-5793-4

USN-5815-1

USN-5877-1

USN-6045-1

USN-6071-1

USN-6124-1

ZDI-22-1452

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 760

• https://github.com/torvalds/linux/commit/9efd23297cca · Patch
• https://zerodayinitiative.com/advisories/ZDI-22-1452 · Security Note
• https://ubuntu.com/security/notices/USN-5793-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3594 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4574-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3929-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4539-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4520-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2036 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-3586 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4272-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0379.html · Security Note