PT-2022-6332 · Linux+2 · Linux Kernel+2

Syzbot · Published 2022-08-10 · Updated 2024-05-17 · CVE-2022-3629

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A vulnerability was found in the Linux Kernel, affecting the vsock connect function of the net/vmw vsock/af vsock.c file. This issue is related to incorrect handling of socket block usage counters in the IPsec component of the Linux operating system. The manipulation leads to a memory leak. The complexity of an attack is rather high, and exploitation appears to be difficult. It may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2023-00944

CVE-2022-3629

DLA-3173-1

OESA-2022-2035

OESA-2022-2036

OESA-2022-2045

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 564

• 🔥 https://github.com/Markakd/CVE-2022-2588 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/0x0000000000-03/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/bb33bb/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/avboy1337/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/kiks7/CVE-2022-2602-Kernel-Exploit · Exploit
• 🔥 https://github.com/LukeGix/CVE-2022-2602 · Exploit
• 🔥 https://github.com/Pwnzer0tt1/CVE-2022-36946 · Exploit
• 🔥 https://github.com/aels/CVE-2022-2586-LPE · Exploit
• 🔥 https://github.com/BassamGraini/CVE-2022-2588 · Exploit
• 🔥 https://github.com/snackbauer/CVE-2022-2588 · Exploit
• 🔥 https://github.com/PolymorphicOpcode/CVE-2022-2588 · Exploit
• 🔥 https://github.com/ida-bro/CVE-2022-2588 · Exploit
• 🔥 https://github.com/sang-chu/CVE-2022-2588 · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-2588 · Exploit