CVE-2022-36879

moderate-risk
Published 2022-07-27

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Do I need to act?

-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (20)

Aff 8300 Firmware
Aff 8700 Firmware
Fas A250 Firmware
Fas 500F Firmware

Affected Vendors

Debian Linux Netapp

References (12)

Mailing List https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85...
Patch https://github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb90...
Mailing List https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
Mailing List https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
Third Party Advisory https://security.netapp.com/advisory/ntap-20220901-0007/
Third Party Advisory https://www.debian.org/security/2022/dsa-5207
Mailing List https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85...
Patch https://github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb90...
Mailing List https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
Mailing List https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
Third Party Advisory https://security.netapp.com/advisory/ntap-20220901-0007/
Third Party Advisory https://www.debian.org/security/2022/dsa-5207
39
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 21/34 · High