CVE-2022-3624

2022-10-2100:00:00

ubuntu.com

linux kernel

ipsec

memory leak

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

Percentile

12.6%

JSON

A vulnerability was found in Linux Kernel and classified as problematic.
Affected by this issue is the function rlb_arp_xmit of the file
drivers/net/bonding/bond_alb.c of the component IPsec. The manipulation
leads to memory leak. It is recommended to apply a patch to fix this issue.
The identifier of this vulnerability is VDB-211928.