CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2022-07-27

Last modified

2026-10-14

Affected products

• Debian Linux (Debian)
• Linux Kernel (Linux)
• A700s Firmware (Netapp)
• Active Iq Unified Manager (Netapp)
• Aff 500f Firmware (Netapp)
• Aff 8300 Firmware (Netapp)
• Aff 8700 Firmware (Netapp)
• Aff A250 Firmware (Netapp)
• Aff A400 Firmware (Netapp)
• E-series Santricity Os Controller (Netapp)
• Fas 500f Firmware (Netapp)
• Fas 8300 Firmware (Netapp)
• Fas 8700 Firmware (Netapp)
• Fas A250 Firmware (Netapp)
• Fas A400 Firmware (Netapp)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500s Firmware (Netapp)
• H610c Firmware (Netapp)
• H610s Firmware (Netapp)
• H615c Firmware (Netapp)
• H700s Firmware (Netapp)
• Hci Bootstrap Os (Netapp)
• Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)

References

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85daf0e725358be78dfd208dea5fd665d8cb901
• https://github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb901
• https://www.debian.org/security/2022/dsa-5207
• https://security.netapp.com/advisory/ntap-20220901-0007/
• https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
• https://cert-portal.siemens.com/productcert/html/ssa-419740.html
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html