CVE-2022-3524

Public on 2022-10-16
Modified on 2024-01-12
Description

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.

Severity
Important
See what this means
CVSS v3 Base Score
7.5
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 kernel 2023-03-17 15:53 ALAS-2023-1707
Amazon Linux 2 - Core kernel 2022-12-09 20:58 ALAS2-2022-1903
Amazon Linux 2 - Kernel-5.10 Extra kernel 2022-12-01 18:21 ALAS2KERNEL-5.10-2022-023
Amazon Linux 2 - Kernel-5.15 Extra kernel 2022-12-01 18:21 ALAS2KERNEL-5.15-2022-011
Amazon Linux 2 - Kernel-5.4 Extra kernel 2022-12-01 18:21 ALAS2KERNEL-5.4-2022-039
Amazon Linux 2023 kernel 2023-02-17 20:46 ALAS2023-2023-070
Amazon Linux 2 - Livepatch Extra kernel-livepatch-4.14.294-220.533 2023-01-18 00:25 ALAS2LIVEPATCH-2023-095
Amazon Linux 2 - Livepatch Extra kernel-livepatch-4.14.296-222.539 2023-01-18 00:25 ALAS2LIVEPATCH-2023-096
Amazon Linux 2 - Livepatch Extra kernel-livepatch-4.14.299-223.520 2023-01-18 00:25 ALAS2LIVEPATCH-2023-100
Amazon Linux 2 - Livepatch Extra kernel-livepatch-5.10.144-127.601 2023-02-03 20:56 ALAS2LIVEPATCH-2023-104
Amazon Linux 2 - Livepatch Extra kernel-livepatch-5.10.144-127.601 2023-01-18 00:25 ALAS2LIVEPATCH-2023-098
Amazon Linux 2 - Livepatch Extra kernel-livepatch-5.10.147-133.644 2023-01-18 00:25 ALAS2LIVEPATCH-2023-097
Amazon Linux 2 - Livepatch Extra kernel-livepatch-5.10.147-133.644 2023-02-03 20:56 ALAS2LIVEPATCH-2023-103
Amazon Linux 2 - Livepatch Extra kernel-livepatch-5.10.149-133.644 2023-02-03 20:56 ALAS2LIVEPATCH-2023-105
Amazon Linux 2 - Livepatch Extra kernel-livepatch-5.10.149-133.644 2023-01-18 00:25 ALAS2LIVEPATCH-2023-099

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVSSv3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L