Lucene search

[email protected]NVD:CVE-2022-36879

HistoryJul 27, 2022 - 4:15 a.m.

CVE-2022-36879

2022-07-2704:15:10

[email protected]

web.nvd.nist.gov

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

14.2%

JSON

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤5.18.14

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

Node

netappa700s_firmwareMatch-

AND

netappa700sMatch-

Node

netappactive_iq_unified_managerMatch-vmware_vsphere

netappe-series_santricity_os_controllerRange11.0–11.50.2

netapphci_bootstrap_osMatch-

Node

netappaff_8300_firmwareMatch-

AND

netappaff_8300Match-

Node

netappfas_8300_firmwareMatch-

AND

netappfas_8300Match-

Node

netappaff_8700_firmwareMatch-

AND

netappaff_8700Match-

Node

netappfas_8700_firmwareMatch-

AND

netappfas_8700Match-

Node

netappaff_a400_firmwareMatch-

AND

netappaff_a400Match-

Node

netappfas_a400_firmwareMatch-

AND

netappfas_a400Match-

Node

netappaff_a250_firmwareMatch-

AND

netappaff_a250Match-

Node

netappfas_a250_firmwareMatch-

AND

netappfas_a250Match-

Node

netappfas_500f_firmwareMatch-

AND

netappfas_500fMatch-

Node

netappaff_500f_firmwareMatch-

AND

netappaff_500fMatch-

Node

netapph300s_firmwareMatch-

AND

netapph300sMatch-

Node

netapph500s_firmwareMatch-

AND

netapph500sMatch-

Node

netapph700s_firmwareMatch-

AND

netapph700sMatch-

Node

netapph410s_firmwareMatch-

AND

netapph410sMatch-

Node

netapph410c_firmwareMatch-

AND

netapph410cMatch-

Node

netapph610c_firmwareMatch-

AND

netapph610cMatch-

Node

netapph610s_firmwareMatch-

AND

netapph610sMatch-

Node

netapph615c_firmwareMatch-

AND

netapph615cMatch-

References

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85daf0e725358be78dfd208dea5fd665d8cb901

github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb901

lists.debian.org/debian-lts-announce/2022/09/msg00011.html

lists.debian.org/debian-lts-announce/2022/10/msg00000.html

security.netapp.com/advisory/ntap-20220901-0007/

www.debian.org/security/2022/dsa-5207

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

14.2%

JSON

Related for NVD:CVE-2022-36879

veracode1 cve1 cnvd1 cvelist1 osv18 ubuntucve1 cbl_mariner2 debiancve1 redhatcve1 prion1 nessus64 amazon4 ubuntu14 openvas50 mageia2 debian3 photon3 redhat8 ibm1 oraclelinux1 suse6 redos1 slackware1 ics2 avleonov1