CVE-2022-3606

🗓️ 20 Dec 2022 11:34:46Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 28 Views

Flaw in libbpf, NULL pointer dereference in find_prog_by_sec_insn, denial of service

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Hyper-Converged Database	24 Apr 202623:47	–	ibm
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libbpf (ALAS-2023-1969)	7 Mar 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0079: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0079)	14 May 202500:00	–	nessus
Tenable Nessus	Debian dla-4137 : libbpf-dev - security update	25 Apr 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2023-1012)	5 Jan 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2023-1037)	5 Jan 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2023-2072)	7 Jun 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2023-2124)	7 Jun 202300:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2023-0142)	9 Nov 202300:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3606
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

28 Jan 2025 17:31Current

1.1Low risk

Vulners AI Score1.1

CVSS 3.14.4

EPSS0.00315

cve-2022-3606 libbpf null pointer denial of service red hat mitigation