IM
IronMonkey Threat Research

CVE-2022-3521 LOW

Published: 2022-10-16 | Last Modified: 2024-11-21 | Status: Modified

Description

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.

Additional Descriptions (1)

Se ha encontrado una vulnerabilidad en el Kernel de Linux y ha sido clasificada como problemática. Esta vulnerabilidad afecta a la función kcm_tx_work del archivo net/kcm/kcmsock.c del componente kcm. La manipulación conlleva a una condición de carrera. Es recomendado aplicar un parche para corregir este problema. VDB-211018 es el identificador asignado a esta vulnerabilidad

CVSS Metrics

Base Score: 2.5 (LOW)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactLOW

Source: [email protected]

Type: Primary

Exploitability Score: 1.0

Impact Score: 1.4

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-362

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd37039a880> Operating System
linux linux_kernel 5.19 <built-in method update of dict object at 0x7fd39c4457c0> Operating System
linux linux_kernel 5.19 <built-in method update of dict object at 0x7fd39c4b0800> Operating System
linux linux_kernel 5.19 <built-in method update of dict object at 0x7fd2d814ae00> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd37039b640> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

References