PT-2022-7351 · Linux+2 · Linux Kernel+2

Martin Willi · Published 2022-04-13 · Updated 2023-08-14 · CVE-2022-3526

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A memory leak issue was found in the Linux Kernel, affecting the macvlan handle frame function in the drivers/net/macvlan.c file of the network component. This issue can be exploited remotely, leading to a denial of service. The manipulation of this function results in a memory leak.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-1810

ALT-PU-2022-1830

ALT-PU-2022-1833

ALT-PU-2022-1853

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2023-4894

BDU:2024-04151

CVE-2022-3526

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4617-1

Affected Products

Alt Linux

Linux Kernel

Suse

References · 462

• https://bdu.fstec.ru/vul/2024-04151 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3526 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=e16b859872b87650bb55b12cca5a5fcdc49c1442 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-3526 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3526 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4617-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3526 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3526 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-3526 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3998-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4072-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3526 · Vendor Advisory
• https://bugzilla.suse.com/1203002 · Note
• https://suse.com/security/cve/CVE-2022-3707 · Note
• https://bugzilla.suse.com/1205473 · Note