Critical Use After Free Vulnerability in Linux Kernel's IPsec Component (VDB-211929)

Critical Use After Free Vulnerability in Linux Kernel's IPsec Component (VDB-211929)

CVE-2022-3625 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211929 was assigned to this vulnerability.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.