PT-2022-7356 · Linux+1 · Linux Kernel+1

Published 2022-10-03 · Updated 2022-12-23 · CVE-2022-3535

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to the mvpp2 driver in the Linux kernel, specifically with the function mvpp2 dbgfs port init in the file drivers/net/ethernet/marvell/mvpp2/mvpp2 debugfs.c. This function is part of the mvpp2 component. The problem leads to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2024-04156

CVE-2022-3535

MGASA-2022-0442

MGASA-2022-0443

OESA-2022-2025

OESA-2022-2026

OESA-2022-2045

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4617-1

Affected Products

Linux Kernel

Suse

References · 521

• https://nvd.nist.gov/vuln/detail/CVE-2022-3594 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3523 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3929-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2978 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4053-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3635 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3897-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42432 · Security Note
• https://advisories.mageia.org/MGASA-2022-0442.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3521 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-43750 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4617-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41849 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3629 · Security Note
• https://osv.dev/vulnerability/OESA-2022-2026 · Vendor Advisory