CVE-2022-3635

MEDIUM

Linux Kernel 2.6.12-4.9.325 - Use-After-Free in IPsec tst_timer Function

Title source: llm

Description

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

References (3)

Core 3

Core References

Exploit, Mailing List, Patch, Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=3f4093e2bf4673f218c0bf17d8362337c400e77b

Third Party Advisory

https://vuldb.com/?id.211934

Mailing List, Third Party Advisory mailing-list

https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 1.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-119 CWE-362

Status published

Products (2)

debian/debian_linux 10.0

linux/linux_kernel 2.6.12 - 4.9.326

Published Oct 21, 2022

Tracked Since Feb 18, 2026