PT-2022-6242 · Linux+5 · Linux Kernel+5

Khalid Masum · Published 2022-10-11 · Updated 2024-01-26 · CVE-2022-3649

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A vulnerability was found in the Linux Kernel, classified as problematic. It affects the nilfs new inode function of the fs/nilfs2/inode.c file in the BPF component, leading to use after free. The issue can be exploited remotely, potentially causing a denial of service.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

ALT-PU-2022-2848

ALT-PU-2022-2849

ALT-PU-2022-2860

ALT-PU-2022-2877

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2022-2951

ALT-PU-2022-2961

ALT-PU-2022-2965

ALT-PU-2022-2968

ALT-PU-2022-2970

ALT-PU-2022-2975

ALT-PU-2022-3061

ALT-PU-2023-4894

ALT-PU-2023-7007

ALT-PU-2023-7682

BDU:2023-00631

CVE-2022-3649

DLA-3173-1

DLA-3245-1

OESA-2022-2031

OESA-2022-2032

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0416-1

USN-5758-1

USN-5792-1

USN-5792-2

USN-5793-1

USN-5793-2

USN-5793-3

USN-5793-4

USN-5853-1

USN-5854-1

USN-5861-1

USN-5862-1

USN-5865-1

USN-5874-1

USN-5875-1

USN-5877-1

USN-5883-1

USN-5909-1

USN-5918-1

USN-5919-1

USN-5924-1

USN-5975-1

USN-5976-1

USN-6007-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

References · 708

• https://ubuntu.com/security/notices/USN-5793-3 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5875-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5758-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5865-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3649 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4574-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3929-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29901 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5874-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5875-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d325dc6eb763c10f591c239550b8c7e5466a5d09 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4272-1 · Vendor Advisory