CVE-2022-3649

🗓️ 21 Oct 2022 00:00:00Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 226 Views

Vulnerability found in Linux Kernel in the function nilfs_new_inode of the file fs/nilfs2/inode.c leading to use after free

Reporter	Title	Published	Views	Family All 411
ATTACKERKB	CVE-2022-3649	21 Oct 202220:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1876 (ALAS-2022-1876)	2 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-022 (ALASKERNEL-5.10-2022-022)	9 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-039 (ALASKERNEL-5.4-2022-039)	14 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2022-1645)	10 Dec 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0002: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0002)	14 May 202500:00	–	nessus
Tenable Nessus	Debian dla-3173 : linux-config-5.10 - security update	2 Nov 202200:00	–	nessus
Tenable Nessus	Debian dla-3245 : hyperv-daemons - security update	24 Dec 202200:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2023-0083)	27 Dec 202300:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2021-4.0-0065	22 Jul 202100:00	–	nessus

NVD

Node

linux linux_kernelRange<4.9.331

linux linux_kernelRange4.10–4.14.296

linux linux_kernelRange4.15–4.19.262

linux linux_kernelRange4.20–5.4.220

linux linux_kernelRange5.5–5.10.148

linux linux_kernelRange5.11–5.15.74

linux linux_kernelRange5.16–5.19.16

linux linux_kernelRange6.0–6.0.2

Node

debian debian_linuxMatch10.0

Node

netapp active_iq_unified_managerMatch-vsphere

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

[
  {
    "vendor": "Linux",
    "product": "Kernel",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00001.html
vuldb	www.vuldb.com/
security	www.security.netapp.com/advisory/ntap-20230214-0009/
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00034.html
git	www.git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/

21 Nov 2024 07:19Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.13.1 - 7

EPSS0.00081