CVE Vulnerability

CVE-2022-3594

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.

5.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://vuldb.com/?id.211363 Third Party Advisory VDB Entry
https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93e2be344a7db169b7119de21ac1bf253b8c6907 Mailing List Patch
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Information

Published : 2022-10-18 08:15

Updated : 2023-02-22 05:24

NVD link : CVE-2022-3594

Mitre link : CVE-2022-3594

Products Affected
No products.
CWE
CWE-404

CWE-779

Logging of Excessive Data