CVE-2022-3524
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - cna@vuldb.com
- Published
- 2022-10-16
- Last modified
- 2026-10-14
- Weaknesses
- CWE-401, CWE-404
Affected products
- Debian Linux (Debian)
- Kernel (Linux)
- Linux Kernel (Linux)
- Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c52c6bb831f6335c176a0fc7214e26f43adbd11
- https://vuldb.com/?id.211021
- https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-769027.html