Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-3594

Good to know:

icon

Date: October 18, 2022

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.

Language: C

Severity Score

Related Resources (8)

https://nvd.nist.gov/vuln/detail/CVE-2022-3594
https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93e2be344a7db169b7119de21ac1bf253b8c6907
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
https://vuldb.com/?id.211363
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
https://access.redhat.com/security/cve/CVE-2022-3594
https://security-tracker.debian.org/tracker/CVE-2022-3594
https://www.mend.io/vulnerability-database/CVE-2022-3594

Severity Score

Weakness Type (CWE)

Improper Resource Shutdown or Release

CWE-404

Logging of Excessive Data

CWE-779

Top Fix

icon

Upgrade Version

Upgrade to version v4.9.331,v4.14.296,v4.19.262,v5.4.220,v5.10.150,v5.15.75,v5.19.17,v6.0.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

Do you need more information?

Contact Us