PT-2022-5928 · Linux+6 · Linux Kernel+6

Syzbot · Published 2022-08-25 · Updated 2023-08-14 · CVE-2022-3521

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A race condition vulnerability has been found in the Linux Kernel, specifically affecting the kcm tx work() function in the net/kcm/kcmsock.c file. This issue is caused by synchronization errors when using a shared resource. Exploitation of this vulnerability could allow an attacker to execute arbitrary code. The manipulation leads to a race condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2022-2497

ALT-PU-2022-2523

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-11131

BDU:2022-07348

CVE-2022-3521

DLA-3244-1

DLA-3245-1

MGASA-2022-0477

MGASA-2022-0478

OESA-2022-2025

OESA-2022-2026

OESA-2022-2033

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

USN-5883-1

USN-5911-1

USN-5912-1

USN-5917-1

USN-5919-1

USN-5920-1

USN-5924-1

USN-5925-1

USN-5927-1

USN-5929-1

USN-5934-1

USN-5935-1

USN-5938-1

USN-5939-1

USN-5940-1

USN-5941-1

USN-5950-1

USN-5951-1

USN-5962-1

USN-5975-1

USN-6000-1

USN-6007-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 642

• https://osv.dev/vulnerability/USN-5962-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3344 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5917-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3594 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4574-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5941-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3929-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29901 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4272-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-47518 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3521 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5929-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3646 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3521 · Vendor Advisory