CVE-2022-3541: Linux Kernel BPF spl2sw_driver.c spl2sw_nvmem_get_mac_address use after free
A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2swnvmemgetmacaddress of the file drivers/net/ethernet/sunplus/spl2swdriver.c of the component BPF. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211041 was assigned to this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.0.3-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3541?
CVE-2022-3541 is classified as a critical vulnerability.
How do I fix CVE-2022-3541?
To fix CVE-2022-3541, apply the recommended patch or update to a safe version of the Linux Kernel.
What software is affected by CVE-2022-3541?
CVE-2022-3541 affects specific versions of the Linux Kernel between 5.19 and 6.0.3.
What type of vulnerability is CVE-2022-3541?
CVE-2022-3541 is a use after free vulnerability in the BPF component of the Linux Kernel.
What component is involved in CVE-2022-3541?
CVE-2022-3541 involves the function spl2sw_nvmem_get_mac_address in the Linux Kernel.