CVE-2022-3566

Aliases:UBUNTU-CVE-2022-3566DEBIAN-CVE-2022-3566CGA-22xx-8g8j-pq83CGA-23hc-3rq7-hpj7CGA-24f7-h46f-8255CGA-2572-5j7f-936rCGA-2927-rxqg-jwcmCGA-29g5-jc8w-hm8xCGA-2mr7-jgfr-ch94CGA-32f8-2m3m-8mc4CGA-37wq-q24f-wm7vCGA-3cjh-ghxr-gvmrCGA-3v7p-99x9-35hgCGA-3vq9-f4pf-3pphCGA-3wfv-57wx-5qx9CGA-428q-x666-w53mCGA-46cm-5xvr-6r2wCGA-48vq-q8j6-h6qvCGA-4hjx-h2c4-6jmcCGA-4q57-7cxr-qw22CGA-4qr3-px6w-7cw5CGA-5cp6-jcrg-mh73CGA-5j2g-3798-mr6qCGA-5mgp-g3pr-79h8CGA-5vpr-h6gp-2mchCGA-69xx-3mv5-m2p8CGA-6gc7-vpg2-686fCGA-6wfh-8rqq-69pcCGA-6x8q-v98x-wvfrCGA-75h9-xmmv-hr9xCGA-78gr-r34w-rpjhCGA-7pw5-hx7h-863fCGA-7wc4-5jgw-hj53CGA-7wj6-73mg-h3crCGA-7wpx-5f7q-7qpwCGA-7xqh-j33v-6v7mCGA-89qc-rxfc-hvh6CGA-8cqw-cj7j-2gvhCGA-8gq6-q948-g3jmCGA-8rrj-g5fw-q999CGA-8w97-fg4p-3mjjCGA-8wvm-64p7-rh2wCGA-92qw-ff3c-hpjjCGA-93f3-5f37-h44fCGA-9733-74hr-2gpmCGA-9w7r-g3jq-m9jhCGA-c28j-hpjg-gj73CGA-c3w9-7c52-h282CGA-c6p8-pcqg-653xCGA-ch5f-p4cg-35rmCGA-chq9-rq3g-593qCGA-cjq8-9cqw-2xh5CGA-cjrq-4jqf-v2f5CGA-cx34-j58j-jhwrCGA-f2x8-xrwx-rfpmCGA-f87q-f3g4-rgqqCGA-f89r-hhvp-r9q6CGA-f8f3-638j-wp63CGA-ff2c-r76w-x95pCGA-fh55-2fq3-4qxgCGA-fj92-96fm-4gp5CGA-g356-h2q9-pw3vCGA-g7gw-h3j5-qjh6CGA-gv72-2gjg-8r6rCGA-h362-pvp8-42m6CGA-h65v-qff2-8pcvCGA-h6q6-827v-fqq6CGA-hq72-5c64-3w5xCGA-hv4m-hr75-qv58CGA-hxpq-8g2h-86mcCGA-j2gf-97mx-fp65CGA-j3jf-99jw-v758CGA-j5rp-7c39-844jCGA-jjc5-2554-652hCGA-jvf5-j486-9p76CGA-m252-vw6w-ggqqCGA-mgfg-89wj-5689CGA-mq3c-gjr5-fxvhCGA-mqxr-x5p6-267gCGA-p288-hj6m-fx9xCGA-p7cm-8v68-c4h8CGA-p872-cx48-mwj9CGA-px6m-gv2w-6grqCGA-q4wx-jhcp-m265CGA-qvmx-3rw8-2fv8CGA-qwww-m8wp-2rvpCGA-r35h-jqpq-h5v7CGA-r464-vp7r-8qfqCGA-r48f-g473-f757CGA-r6q6-5w98-r2h7CGA-r7gw-mqm6-xwwqCGA-rjc4-cpr2-m959CGA-rq92-v34q-74m6CGA-rqq9-75fq-wcq2CGA-rx4f-qmhq-9xhxCGA-v5jr-c2x8-395xCGA-vg4q-wjx4-3xmrCGA-vgc3-5763-7vqjCGA-vjqj-2f6m-hw77CGA-vqwq-7jf8-q22gCGA-vrq3-37w3-hv3qCGA-w4rp-9fp6-pxrvCGA-w67p-mxxp-j9xhCGA-w9rc-259q-m4qgCGA-wfrc-736x-5hp5CGA-wmq7-6r3h-fr9xCGA-wpc9-x9g2-5jvjCGA-wqx5-72mv-wr7xCGA-wv68-v8gg-jjmcCGA-x3mp-727h-h79gCGA-x4f6-vg76-fjjqCGA-x6q4-gqx2-g59gCGA-xqch-8mxr-wm53CGA-xrmf-7452-c24gCGA-xrv8-6c76-37wjCGA-xrxp-h753-ggwv
Advisory lineage Upstream: 0 Downstream: 32
Analyzed
Published: 17 Oct 2022, 00:00
Last modified:30 Jul 2026, 06:38

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.1 HIGH
v3.1 (nvd)
EPSS Score
0.69% LOW
1% probability +0.68%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Oct 2022, 00:00
Published
Vulnerability first disclosed
30 Jul 2026, 06:38
Last Modified
Vulnerability information updated

Description

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult. The vulnerability was introduced in 2.6.12, commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ("Linux-2.6.12-rc2"). Upgrading to version 4.19.317, 5.4.279, 5.10.221, 5.15.162 and 6.1 will fix this issue. The name of the patch is fcd31dd8291b23d713245947ec2b2d99ef07aef2/3b32f265805a49071e2c4568a524398ba22bf93c/d529193eae979a7bf2255cd9fe68b7af7a1c91b3/5bb642cc3355ffd3c8bca0a8bd8e6e65bcc2091c/f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57. The affected component should be upgraded.

CVSS Metrics

  • v4.0•LOW•Score: 2.1CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
  • v4.0•LOW•Score: 2.1CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • v4.0•LOW•Score: 2.1CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
  • v3.1•MEDIUM•Score: 4.6CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
  • v3.1•HIGH•Score: 7.1CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v3.0•MEDIUM•Score: 4.6CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
  • v2.0•MEDIUM•Score: 4AV:A/AC:H/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
  • v2.0•MEDIUM•Score: 4AV:A/AC:H/Au:S/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.69%• Percentile: 51%

Techniques & Countermeasures

  • CWE-362•Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

    The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected Systems

  • chainguard•hyperv-daemons-6.18

    < 0

  • chainguard•hyperv-daemons-generic

    < 0

  • chainguard•linux-aws-6.12

    < 6.12.65-r0 | < 0

  • chainguard•linux-aws-6.12-boot-installed

    < 0

  • chainguard•linux-aws-6.12-fips-boot-installed

    < 0

  • chainguard•linux-aws-6.12-headers

    < 0

  • chainguard•linux-aws-6.12-modules

    < 0

  • chainguard•linux-aws-6.18

    < 0 | < 6.18.10-r0

  • chainguard•linux-aws-6.18-boot-installed

    < 0

  • chainguard•linux-aws-6.18-fips-boot-installed

    < 0

  • chainguard•linux-aws-6.18-headers

    < 0

  • chainguard•linux-aws-6.18-modules

    < 0

  • chainguard•linux-aws-generic

    < 0 | < 6.18.5-r0

  • chainguard•linux-aws-generic-boot-installed

    < 0

  • chainguard•linux-aws-generic-fips-boot-installed

    < 0

  • chainguard•linux-aws-generic-headers

    < 0

  • chainguard•linux-aws-generic-modules

    < 0

  • chainguard•linux-azure-6.12

    < 0 | < 6.12.65-r1

  • chainguard•linux-azure-6.18

    < 0

  • chainguard•linux-azure-6.18-boot-installed

    < 0

  • chainguard•linux-azure-6.18-fips-boot-installed

    < 0

  • chainguard•linux-azure-6.18-headers

    < 0

  • chainguard•linux-azure-6.18-modules

    < 0

  • chainguard•linux-azure-generic

    < 0 | < 6.18.5-r0

  • chainguard•linux-azure-generic-boot-installed

    < 0

  • chainguard•linux-azure-generic-fips-boot-installed

    < 0

  • chainguard•linux-azure-generic-headers

    < 0

  • chainguard•linux-azure-generic-modules

    < 0

  • chainguard•linux-gcp-6.12

    < 6.12.65-r0 | < 0

  • chainguard•linux-gcp-6.18

    < 0 | < 6.18.10-r0

  • chainguard•linux-gcp-6.18-boot-installed

    < 0

  • chainguard•linux-gcp-6.18-fips-boot-installed

    < 0

  • chainguard•linux-gcp-6.18-headers

    < 0

  • chainguard•linux-gcp-6.18-modules

    < 0

  • chainguard•linux-gcp-generic

    < 0 | < 6.18.5-r0

  • chainguard•linux-gcp-generic-boot-installed

    < 0

  • chainguard•linux-gcp-generic-fips-boot-installed

    < 0

  • chainguard•linux-gcp-generic-headers

    < 0

  • chainguard•linux-gcp-generic-modules

    < 0

  • chainguard•linux-qemu-6.12

    < 6.12.71-r0

  • chainguard•linux-qemu-6.18

    < 6.18.10-r0

  • chainguard•linux-qemu-generic

    < 0 | < 6.18.5-r0

  • chainguard•linux-qemu-generic-bootc-boot-installed

    < 6.18.5-r0

  • chainguard•linux-qemu-melange

    < 6.18.16-r0

  • chainguard•linux-qemu-rc

    < 6.18_rc6-r0 | < 6.18_rc5-r0 | < 6.19_rc2-r0 | < 6.19_rc1-r1 | < 6.19_rc1-r2 | < 6.19_rc3-r0 | < 6.19_rc5-r0 | < 6.18_rc5-r1 | < 6.19_rc1-r0 | < 6.18_rc7-r2 | < 6.19_rc4-r0 | < 6.18_rc7-r3 | < 0

  • chainguard•linux-qemu-rc-boot-installed

    < 0

  • chainguard•linux-qemu-rc-fips-boot-installed

    < 0

  • chainguard•linux-qemu-rc-headers

    < 0

  • chainguard•linux-qemu-rc-modules

    < 0

  • chainguard•linux-vmware-6.12

    < 6.12.71-r0

Showing first 50 affected entries in server-rendered view.

References (24)