CVE-2022-3633: debian debian_linux
CVSS: 3.5v3.1LowModified
AliasesUBUNTU-CVE-2022-3633DEBIAN-CVE-2022-3633CGA-23pm-hr26-p83jCGA-24q2-q3pc-x94wCGA-254r-j2r3-84q2CGA-25j3-h74c-549pCGA-264c-2898-fgwfCGA-29w5-2jr7-x5pxCGA-2fpw-m4q4-mw6vCGA-2jvc-qq7q-vmgjCGA-2p49-pwj4-mcjmCGA-2pf2-mr2x-jrj2CGA-2r3p-m5c4-xpfgCGA-2wc2-2mcj-4h4wCGA-3455-qwmp-69vjCGA-34qp-6gjq-p82pCGA-3532-5x42-hr64CGA-37vq-x9hq-9p8hCGA-3fw7-m726-hw66CGA-3mqm-mqhv-p78wCGA-3rxc-qvqm-v3qfCGA-3x85-6q47-8vg9CGA-4cfh-9fxc-xpc7CGA-4cfr-wfc3-9hm4CGA-4hf7-56r5-5hm8CGA-4qp2-p339-cgmrCGA-4vv6-mhqv-2vq4CGA-57mh-3jjv-rx59CGA-5fjj-h2wv-mfjhCGA-5gq4-pc7x-9jgqCGA-5h8w-47gf-745pCGA-5qfg-4pvr-cf3hCGA-5r3v-34hq-x3wcCGA-5wv6-35qr-jv9pCGA-6227-7839-29wgCGA-664c-jw8q-h4fxCGA-683h-rrx8-5cm6CGA-69pr-wrh5-m535CGA-6cw5-p5cc-8qqqCGA-6jjw-p7q4-ch4fCGA-6vmv-4jh9-cq39CGA-6wc8-3jg9-332rCGA-73c4-rghg-f8rfCGA-75gx-772f-r2xxCGA-774p-ggpj-48rmCGA-79p8-5cj7-7g8pCGA-7chq-gc36-rw8pCGA-7gr3-588w-7h88CGA-7hrc-ph9x-jj5cCGA-7mc8-3wr4-c5f4CGA-7rwj-639q-8mf8CGA-7v8g-222r-h762CGA-827g-23gq-36grCGA-82vq-6hmw-jpc4CGA-859c-g743-6gppCGA-85gp-67qj-3qj9CGA-863m-7r6h-f657CGA-877c-89fx-6jf3CGA-89c6-9x55-c228CGA-8gr4-qc5v-vmvmCGA-8mwr-w595-wq23CGA-8pww-qgj4-7ccjCGA-8qmr-p5jp-mm43CGA-8x3p-vgff-c6r7CGA-8xgg-wrmw-8v3hCGA-9jqv-27g8-45hhCGA-9v3m-5f75-h2m5CGA-9wfv-945m-h85qCGA-c28g-9f3m-qwgqCGA-cgq9-hcf6-q586CGA-cjgp-j43q-r2f8CGA-cmw6-wp3h-mp9pCGA-crw2-hv7q-v9q3CGA-f7h2-g663-hgfcCGA-f9w5-pc66-p69mCGA-fc2q-h3fm-qcm7CGA-ffmx-mvmq-69cwCGA-fmhg-3672-qgqvCGA-fprp-9287-3gh8CGA-fx74-c555-mfvqCGA-g76v-4m39-26wjCGA-g836-cq9c-6qh9CGA-g8wf-4482-v22gCGA-gm73-6m2q-jp59CGA-gmp8-44wp-78g7CGA-gqf4-x23j-87wxCGA-gqxx-m699-67pfCGA-gx6m-w4g3-9xcwCGA-h3cg-9fjg-fpwvCGA-h5rh-vg8r-hrrqCGA-h734-7mjp-cfx8CGA-h95p-cqxj-q3pgCGA-hc39-xgpx-53h3CGA-hh9h-6r88-x6mmCGA-hr7f-mc6v-8f52CGA-j2rm-w6h7-h6v7CGA-j4rv-cfvc-7fvcCGA-j722-cgxh-25fmCGA-j7q6-fc3c-rvm5CGA-jh37-m9x5-4jwvCGA-jmf6-34j3-rmwrCGA-jqr5-95w6-chqfCGA-jv66-9qqg-xm75CGA-jw6v-6rc4-hrx5CGA-m22c-c7jc-rc5cCGA-m3pw-jh8h-7wq6CGA-mgcq-g68j-689gCGA-mmm8-27ph-chxfCGA-mq42-hmrv-r8xjCGA-mvcj-xq8c-xxmcCGA-p38r-x8g9-6ccpCGA-p4m7-m8jj-rh8vCGA-p5f9-g77c-2346CGA-p7mh-m4xp-5p4mCGA-p9j8-q6r4-482rCGA-pc2c-5m99-7h3qCGA-pc6p-rq79-fmqmCGA-pfv8-f954-3gjqCGA-ph3w-2r8w-gwr8CGA-ph6q-4v3q-hvm8CGA-pqxj-rfgc-4hf8CGA-q4pj-6qfx-hx5pCGA-q6qh-jqpg-x298CGA-qc3f-p4fr-rv44CGA-qfjx-8q8g-v9fvCGA-qgq4-r6wc-7ccfCGA-qhg5-hf7r-9wvmCGA-qpvm-5cqv-7852CGA-r4m6-gvwp-h8g8CGA-rcq7-6w86-jh6cCGA-rm49-j7v4-p3mcCGA-rmqh-32wm-mq2fCGA-rmx3-827r-vqj8CGA-v6g2-jf2g-fqg6CGA-v8rj-jfjj-fg3pCGA-vfwq-5xgj-cwxmCGA-vh2m-cgqq-6664CGA-vm65-xxmv-9434CGA-vmv9-g56w-5cjpCGA-vqh8-xp5v-6m77CGA-vrc7-2v54-rc2wCGA-w2c6-cj85-m3whCGA-w2f8-8xx3-r8c3CGA-w3cr-c6mj-xrpfCGA-w3jr-cv78-wwjfCGA-w6xm-224f-wghjCGA-w842-gvrh-47fmCGA-wgcg-5p9r-gf35CGA-x2jc-64x3-rh9cCGA-x55v-wgqf-7p4rCGA-x9f7-gm3x-j9jcCGA-x9jm-77qg-h39cCGA-xhvw-gwqc-p9m9CGA-xj5v-x4mc-wg8vCGA-xj8c-xv9w-jrq4CGA-xxrw-4qxc-hgccCGA-8qjh-q94f-mcr5CGA-p5g4-7h47-rch8CGA-wmfg-35j7-3vfmCGA-x3m6-36c3-qc3pCGA-954f-239h-854qCGA-c3v9-qc98-3h34CGA-f4xv-c6mq-3678CGA-mc5h-784q-p4rq
Published 21-10-2022Last modified 14-10-2026
Vulnerability summary
CVE-2022-3633 is a low (CVSS 3.5) vulnerability in debian debian_linux. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 25.8% of scored vulnerabilities.
CVSS score
3.5/10
010
Low · v3.1 (CVE.org)EPSS score
0.34%
0%100%
Low · +0.03 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 4Timeline
- 21-10-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.
CVSS metrics
8 scores · 5 sources · 3 versionsLow 3.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LSources5 sources · 3.3–3.5
- OSV · UbuntuEcosystem advisory · calculated3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · DebianEcosystem advisory · calculated3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · ChainguardEcosystem advisory · calculated3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
- NVDNIST3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
Low 3.5Preferred score · CVE.org (CNA)
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LSourcesSingle source
Low 2.7Preferred score · CVE.org (CNA)
AV:A/AC:L/Au:S/C:N/I:N/A:PSourcesAll 2 agree
- NVDNIST2.7LowAV:A/AC:L/Au:S/C:N/I:N/A:P
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
+0.03 pp
From 0.31% on 18-09-2026
18-09-202618-10-2026
EPSS score0.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard78 products
- hyperv-daemons-6.18All versions (No fix recorded)
- hyperv-daemons-genericAll versions (No fix recorded)
- linux-aws-6.12All versions (No fix recorded) | < 6.12.65-r0
- linux-aws-6.12-boot-installedAll versions (No fix recorded)
- linux-aws-6.12-fips-boot-installedAll versions (No fix recorded)
Ubuntu78 products
- linux< 5.4.0-132.148 | < 5.15.0-53.59
- linux-aws< 5.4.0-1089.97 | < 5.15.0-1023.27
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
Debian2 products
- linux< 5.19.6-1
- debian_linuxEOL10.0
Linux2 products
- kerneln/a
- linux_kernelna
4 vendors · 160 products
