CVE-2022-3028

CVE Details

Release Date:2022-11-13

Description


A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.

See more information about CVE-2022-3028 from MITRE CVE dictionary and NIST NVD


CVSS v3.0 metrics


NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.

Base Score: Base Metrics:
Access Vector: Undefined Attack Complexity: Undefined
Privileges Required: None User Interaction: None
Scope: Unchanged Confidentiality Impact: Undefined
Integrity Impact: Undefined Availability Impact: Undefined

Errata information


PlatformErrataRelease Date
Oracle Linux version 6 (kernel-uek)ELSA-2022-98522022-10-04
Oracle Linux version 7 (kernel-uek)ELSA-2022-98522022-10-04
Oracle Linux version 7 (kernel-uek)ELSA-2022-98702022-10-10
Oracle Linux version 7 (kernel-uek)ELSA-2022-99262022-10-21
Oracle Linux version 7 (kernel-uek)ELSA-2022-99982022-11-15
Oracle Linux version 7 (kernel-uek-container)ELSA-2022-98712022-10-10
Oracle Linux version 7 (kernel-uek-container)ELSA-2022-99272022-10-21
Oracle Linux version 7 (kernel-uek-container)ELSA-2022-99992022-11-15
Oracle Linux version 8 (kernel-uek)ELSA-2022-99262022-10-21
Oracle Linux version 8 (kernel-uek)ELSA-2022-99302022-10-24
Oracle Linux version 8 (kernel-uek)ELSA-2022-99982022-11-15
Oracle Linux version 8 (kernel-uek-container)ELSA-2022-99272022-10-21
Oracle Linux version 8 (kernel-uek-container)ELSA-2022-99312022-10-24
Oracle Linux version 8 (kernel-uek-container)ELSA-2022-99992022-11-15
Oracle Linux version 9 (kernel-uek)ELSA-2022-99302022-10-24
Oracle VM version 3 (kernel-uek)OVMSA-2022-00262022-10-11



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete