PT-2022-5313

CVE-2022-3625

·

Published

2022-08-09

·

Updated

2026-10-18

Description by

CVSS 4.0
8.4
High
MetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description A critical issue affects the function devlink param set/devlink param get of the file net/core/devlink.c in the IPsec component, leading to use after free. This could allow an attacker to execute arbitrary code.
Recommendations To fix this issue, it is recommended to apply a patch. As a temporary workaround, consider disabling the devlink param set/devlink param get function until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2022-3625
BDU:2022-06616
ALSA-2023:2148
ALSA-2023:2458
ALSA-2023:2736
ALSA-2023:2951
ALT-PU-2022-2497
ALT-PU-2022-2509
ALT-PU-2022-2523
ALT-PU-2022-2529
ALT-PU-2022-2531
ALT-PU-2022-2532
ALT-PU-2022-2560
ALT-PU-2022-2633
ALT-PU-2022-2635
ALT-PU-2022-2664
ALT-PU-2022-2676
ALT-PU-2022-2682
ALT-PU-2022-2692
ALT-PU-2022-2915
ALT-PU-2022-2919
ALT-PU-2023-4894
CESA-2023_2736
CESA-2023_2951
CLSA-2023-1686585068
CLSA-2023-1686651204
CLSA-2026-1782148735
DLA-3173-1
OESA-2022-2045
OPENSUSE-SU-2022_3897-1
OPENSUSE-SU-2022_3998-1
OPENSUSE-SU-2022_4053-1
OPENSUSE-SU-2022_4072-1
OPENSUSE-SU-2022_4617-1
RHSA-2023:2148
RHSA-2023_2148
RHSA-2023:2458
RHSA-2023_2458
RHSA-2023:2736
RHSA-2023_2736
RHSA-2023:2951
RHSA-2023_2951
RHSA-2024:0930
SUSE-SU-2022:3897-1
SUSE-SU-2022:3929-1
SUSE-SU-2022:3998-1
SUSE-SU-2022:4053-1
SUSE-SU-2022:4072-1
SUSE-SU-2022:4589-1
SUSE-SU-2022:4614-1
SUSE-SU-2022:4617-1
USN-5728-1
USN-5728-2
USN-5728-3
USN-5729-1
USN-5729-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com