CVE-2022-3646

Public on 2022-10-21
Modified on 2024-01-14
Description

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability.

Severity
Medium
See what this means
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 kernel 2022-12-01 17:33 ALAS-2022-1645
Amazon Linux 2 - Core kernel 2022-10-31 19:40 ALAS2-2022-1876
Amazon Linux 2 - Kernel-5.10 Extra kernel 2022-10-31 21:49 ALAS2KERNEL-5.10-2022-022
Amazon Linux 2 - Kernel-5.15 Extra kernel 2022-10-31 21:49 ALAS2KERNEL-5.15-2022-010
Amazon Linux 2 - Kernel-5.4 Extra kernel 2022-10-31 21:49 ALAS2KERNEL-5.4-2022-038

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD CVSSv3 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L