CVE-2022-3606

Updated: 2024-11-30 02:43:11.898722

Description:

A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to apply a patch to fix this issue. The identifier VDB-211749 was assigned to this vulnerability.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-08 04:07:31
AlmaLinux 9.2 FIPS kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-21 04:12:08
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-07-21 04:15:31
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2023-09-19 05:07:35
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2023-07-21 04:15:30
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2023-07-21 04:15:30
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-07-21 04:15:31
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-07-21 04:15:30
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Released CLSA-2023:1693903408 2023-09-05 05:07:25
Ubuntu 16.04 ELS linux 4.4.0 5.5 MEDIUM Released CLSA-2023:1693827322 2023-09-04 09:28:43
Total: 11