CVE-2022-3545

2022-10-1700:00:00

ubuntu.com

linux kernel

ipsec

area_cache_get

use after free

vulnerability

patch

vdb-211045

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

14.4%

JSON

A vulnerability has been found in Linux Kernel and classified as critical.
Affected by this vulnerability is the function area_cache_get of the file
drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component
IPsec. The manipulation leads to use after free. It is recommended to apply
a patch to fix this issue. The identifier VDB-211045 was assigned to this
vulnerability.

Notes

Author	Note
rodrigo-zaiden	USN-5975-1 first publication included esm/xenial linux-gcp version 4.15.0-1146.162~16.04.1 by mistake, please refer to USN-6007-1.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-206.217UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-144.161UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-67.74UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-35.36UNKNOWN
ubuntu23.04noarchlinux< 6.1.0-14.14UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1151.164UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1097.105UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1031.35UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1020.21UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1031.35~20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-206.217	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-144.161	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-67.74	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-35.36	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.1.0-14.14	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1151.164	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1097.105	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1031.35	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1020.21	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1031.35~20.04.1	UNKNOWN