Vulnerability Description
A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is 17a5f6a78dc7b8db385de346092d7d9f9dc24df6. It is best practice to apply a patch to resolve this issue. No released Linux Kernel version was ever affected by this CVE.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | - |
| Debian | Debian Linux | 11.0 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=1Mailing ListPatchVendor Advisory
- https://vuldb.com/cve/CVE-2022-3636
- https://vuldb.com/vuln/211935
- https://vuldb.com/vuln/211935/cti
- https://www.kernel.org/
- https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=1Mailing ListPatchVendor Advisory
- https://vuldb.com/?id.211935Permissions RequiredThird Party Advisory
- https://www.debian.org/security/2023/dsa-5333Third Party Advisory
FAQ
What is CVE-2022-3636?
CVE-2022-3636 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the compon...
How severe is CVE-2022-3636?
CVE-2022-3636 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-3636?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.