CVE-2022-36879

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.18.14

Description An issue was discovered in the Linux kernel where the xfrm expand policies function in net/xfrm/xfrm policy.c can cause a refcount to be dropped twice, potentially leading to a denial of service. This issue can be exploited by a remote attacker.

Recommendations For Linux kernel versions through 5.18.14, as a temporary workaround, consider disabling the xfrm expand policies function until a patch is available. Restrict access to the net/xfrm/xfrm policy.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.