CVE-2022-36879: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.19 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch f85daf0e725358be78dfd208dea5fd665d8cb901
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36879?
The severity of CVE-2022-36879 is classified as high due to potential memory corruption issues.
How do I fix CVE-2022-36879?
To fix CVE-2022-36879, update the Linux kernel to version 5.19 or higher.
What systems are affected by CVE-2022-36879?
CVE-2022-36879 affects Linux kernel versions up to 5.18.14 across various distributions.
Can CVE-2022-36879 lead to remote code execution?
Yes, CVE-2022-36879 can potentially lead to remote code execution due to improper handling of reference counts.
Are there any workarounds for CVE-2022-36879?
There are no effective workarounds for CVE-2022-36879 other than upgrading to a patched kernel version.