CVE-2022-36879: Medium severity Linux Linux kernel vulnerability
Published Jul 27, 2022
·Updated
An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice.
Affected Software
84 affected componentsFixes available
redhat/kernel<5.19
5.19
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Linux Linux kernel<=5.18.14
Debian Debian Linux=10.0
Debian Debian Linux=11.0
All of the following
NetApp A700s Firmware
NetApp A700s
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp E-Series SANtricity OS Controller>=11.0<=11.50.2
NetApp Hci Bootstrap Os
All of the following
NetApp Aff 8300 Firmware
NetApp Aff 8300
All of the following
NetApp Fas 8300 Firmware
NetApp Fas 8300
All of the following
NetApp Aff 8700 Firmware
NetApp Aff 8700
All of the following
NetApp Fas 8700 Firmware
NetApp Fas 8700
All of the following
NetApp Aff A400 Firmware
NetApp Aff A400
All of the following
NetApp Fas A400 Firmware
NetApp Fas A400
All of the following
NetApp Aff A250 Firmware
NetApp Aff A250
All of the following
NetApp Fas A250 Firmware
NetApp Fas A250
All of the following
NetApp Fas 500f Firmware
NetApp Fas 500f
All of the following
NetApp Aff 500f Firmware
NetApp Aff 500f
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
All of the following
NetApp H610c Firmware
NetApp H610c
All of the following
NetApp H610s Firmware
NetApp H610s
All of the following
NetApp H615c Firmware
NetApp H615c
NetApp A700s Firmware
NetApp A700s
NetApp Aff 8300 Firmware
NetApp Aff 8300
NetApp Fas 8300 Firmware
NetApp Fas 8300
NetApp Aff 8700 Firmware
NetApp Aff 8700
NetApp Fas 8700 Firmware
NetApp Fas 8700
NetApp Aff A400 Firmware
NetApp Aff A400
NetApp Fas A400 Firmware
NetApp Fas A400
NetApp Aff A250 Firmware
NetApp Aff A250
NetApp Fas A250 Firmware
NetApp Fas A250
NetApp Fas 500f Firmware
NetApp Fas 500f
NetApp Aff 500f Firmware
NetApp Aff 500f
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
NetApp H610c Firmware
NetApp H610c
NetApp H610s Firmware
NetApp H610s
NetApp H615c Firmware
NetApp H615c
Remediation
Event History
Jul 27, 2022
CVE Published
via MITRE·03:27 AM
Data Sourced
via MITRE·03:27 AM
Description
Aug 19, 2022
Data Sourced
via Red Hat·04:46 PM
DescriptionSeverityAffected Software
Jan 12, 2024
Data Sourced
via Launchpad·12:11 AM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·05:02 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-36879?
The severity of CVE-2022-36879 is classified as high due to potential memory corruption issues.
2
How do I fix CVE-2022-36879?
To fix CVE-2022-36879, update the Linux kernel to version 5.19 or higher.
3
What systems are affected by CVE-2022-36879?
CVE-2022-36879 affects Linux kernel versions up to 5.18.14 across various distributions.
4
Can CVE-2022-36879 lead to remote code execution?
Yes, CVE-2022-36879 can potentially lead to remote code execution due to improper handling of reference counts.
5
Are there any workarounds for CVE-2022-36879?
There are no effective workarounds for CVE-2022-36879 other than upgrading to a patched kernel version.