VulnerabilityModified

CVE-2022-3567

A vulnerability has been found in Linux Kernel and classified as problematic.

MEDIUM 6.4EPSS 0.31%

Does this matter?

Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.

CVSS 3.1: 6.4 MEDIUMCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS: 0.31% probability · 24th percentile
CISA KEV: Not listed
Weakness: CWE-362
Affected: linux/linux kernel
Source: cna@vuldb.com

References

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=364f997b5cfe1db0d63a390fe7c801fa2b3115f6Patch, Vendor Advisory
https://vuldb.com/?id.211090Permissions Required
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=364f997b5cfe1db0d63a390fe7c801fa2b3115f6Patch, Vendor Advisory
https://vuldb.com/?id.211090Permissions Required

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.