PT-2022-6236 · Linux+4 · Linux Kernel+4

Tetsuo Handa · Published 2022-10-11 · Updated 2023-02-15 · CVE-2022-3621

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A problem has been found in the Linux Kernel, classified as problematic. The affected function is nilfs bmap lookup at level of the file fs/nilfs2/inode.c of the nilfs2 component. The issue leads to a null pointer dereference. It is possible to launch the attack remotely, potentially allowing an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

BDU:2023-00623

CVE-2022-3621

DLA-3173-1

DLA-3245-1

OESA-2022-2035

OESA-2022-2036

OESA-2022-2045

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0416-1

USN-5754-1

USN-5754-2

USN-5755-1

USN-5755-2

USN-5756-1

USN-5756-2

USN-5756-3

USN-5757-1

USN-5757-2

USN-5758-1

USN-5773-1

USN-5774-1

USN-5779-1

USN-5789-1

Affected Products

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

References · 678

• 🔥 https://github.com/Markakd/CVE-2022-2588 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/0x0000000000-03/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/bb33bb/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/avboy1337/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/kiks7/CVE-2022-2602-Kernel-Exploit · Exploit
• 🔥 https://github.com/LukeGix/CVE-2022-2602 · Exploit
• 🔥 https://github.com/Pwnzer0tt1/CVE-2022-36946 · Exploit
• 🔥 https://github.com/aels/CVE-2022-2586-LPE · Exploit
• 🔥 https://github.com/BassamGraini/CVE-2022-2588 · Exploit
• 🔥 https://github.com/snackbauer/CVE-2022-2588 · Exploit
• 🔥 https://github.com/PolymorphicOpcode/CVE-2022-2588 · Exploit
• 🔥 https://github.com/ida-bro/CVE-2022-2588 · Exploit
• 🔥 https://github.com/sang-chu/CVE-2022-2588 · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-2588 · Exploit