CVE-2022-3521

LOW
Published Oct 16, 20223y ago · Modified Jun 17, 20262w ago
2.5 CVSS 3.1
Low
Find Similar
Published Oct 16, 2022 3y ago
Last Modified Jun 17, 2026 2w ago

Description

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.

CVSS Details

Base Score
2.5
Exploitability
1.0
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability Low

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-362

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel* <5.19
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any
debiandebian_linux10.0any

References 4

  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec7eede369fe5b0d085ac51fdbb95184f87bfc6c
    Mailing ListPatch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
    Mailing ListThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
    Mailing ListThird Party Advisory
  • vuldb.com https://vuldb.com/?id.211018
    Permissions RequiredThird Party Advisory

Remediation

  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec7eede369fe5b0d085ac51fdbb95184f87bfc6c
    Mailing ListPatch