CVE-2022-3633: Linux Kernel transport.c j1939_session_destroy memory leak

Published Oct 21, 2022

Updated

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939sessiondestroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.

Affected Software

2 affected components

Linux Linux kernel

Debian Debian Linux=10.0

Remediation

Patch Available

https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=8c21c54a53ab21842f5050fa090f26b03c0313d6

Event History

Oct 21, 2022

CVE Published

12:00 AM

Data Sourced

12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-3633?

The severity of CVE-2022-3633 is classified as problematic due to a memory leak in the Linux Kernel.

How do I fix CVE-2022-3633?

To fix CVE-2022-3633, it is recommended to apply the latest patch provided for the affected Linux Kernel versions.

Which versions of Linux Kernel are affected by CVE-2022-3633?

CVE-2022-3633 affects multiple versions of the Linux Kernel, specifically those including the j1939 transport layer.

What are the implications of CVE-2022-3633?

CVE-2022-3633 can lead to memory leaks, potentially causing resource exhaustion and system instability.

Is CVE-2022-3633 related to any specific Linux distributions?

Yes, CVE-2022-3633 specifically impacts Debian GNU/Linux 10.0 and other systems utilizing the affected Linux Kernel.