CVE-2022-3646
Aliases:UBUNTU-CVE-2022-3646DEBIAN-CVE-2022-3646CGA-25w4-xchf-cc44CGA-2pqh-5997-xv2vCGA-2x9r-j97v-pfcmCGA-3fcm-69mf-c5rhCGA-3pj8-pjjv-mmpfCGA-3rj7-3vf5-pr2mCGA-3w64-6vh6-83r5CGA-3x76-qj5g-6v9vCGA-3xcm-g7f5-wx23CGA-3xh5-h9w7-xpcmCGA-4j4r-vqcp-4w56CGA-4p2c-9xxv-w59pCGA-4q7r-qw97-5xmfCGA-4xv2-9r5f-8vm4CGA-58qq-7c95-ppvfCGA-5ccw-2v4v-cpcxCGA-5q6m-gcqf-f42pCGA-62xj-qmrw-2xx9CGA-64g2-5q8g-cwf3CGA-68x4-w6w3-mwcwCGA-6cx2-xfc9-f539CGA-6mvc-94fv-c3m9CGA-6q9v-3vj2-m4h3CGA-76f7-6w4m-8r4hCGA-7739-5gfv-cj3pCGA-79fw-w6gj-r5qgCGA-7q9r-rw8q-qf8rCGA-7x49-6gfc-vmmpCGA-7x89-p62x-j963CGA-828v-hh9p-xc2fCGA-854v-49xr-mf9mCGA-8m9x-mh2m-3xvpCGA-8vvj-2r8p-gx8hCGA-94f9-pfx3-v26pCGA-9m6x-52vh-mhcfCGA-9qrr-w76x-rh68CGA-9qw2-2r95-4pq5CGA-9w4q-h8vv-h878CGA-c4vm-34v5-fvcjCGA-c5vg-g2vm-p64vCGA-c8vr-765g-x7crCGA-cp8v-mjxh-rx7jCGA-cq66-r3gh-j2p3CGA-f2h2-w35g-6966CGA-f6fg-x7wq-qmc4CGA-fg65-4pv7-xh8vCGA-fhg7-r267-87rgCGA-fjmc-84pm-vp9wCGA-fqwj-49f7-8rxmCGA-gc9p-32r6-6j2hCGA-gf79-2xp8-5528CGA-gmgg-mf88-5rw2CGA-gmjq-mhrw-55cwCGA-gxqm-wf3p-rrf4CGA-h382-qh8h-32r7CGA-h3xg-84qw-ff23CGA-h489-rjwp-5h59CGA-h496-4m48-m892CGA-h65q-2x8r-qmcxCGA-h68h-6qrx-gjm2CGA-h7q6-r66f-xxq7CGA-hcvw-249m-5h7hCGA-hh45-v3qg-xcv3CGA-hr5v-hw5m-7456CGA-hrf2-g535-xw89CGA-hvxf-gjqp-gwjqCGA-hxg2-42rf-hhpmCGA-j3jm-86f4-cx22CGA-j796-fjgp-37qjCGA-j7fp-3qgm-7j44CGA-jgg2-gf5f-gxg8CGA-jp9p-67gj-3pw4CGA-jrg9-38cx-jcp8CGA-jw73-2cv8-55f7CGA-jx5h-297q-j27vCGA-m5xg-2q6x-v4crCGA-m8wc-72vm-87hjCGA-mhq6-wq7x-pw5fCGA-mr99-6hgh-v7f4CGA-mvqv-hq65-4qgfCGA-mw3f-f7mv-c33hCGA-p292-p58x-9p6vCGA-p3hw-2gwq-9rcwCGA-p826-xp56-8rqvCGA-pg6v-hhjq-3357CGA-phqr-c3xw-cf3cCGA-ppv5-8qwc-8j4vCGA-pwpm-8w98-94m3CGA-pwwr-vrx5-v3p3CGA-q22j-8xh8-78p4CGA-qqx8-xwpp-5f37CGA-r2cc-w66q-4v86CGA-rf3m-2c5v-f5rrCGA-rhg4-gmq6-2x3mCGA-rwxc-3rx4-fcxpCGA-v2m2-mggw-x352CGA-v557-q6fx-qx5hCGA-v5v4-4w5x-jprpCGA-vcg2-x3gx-hxmxCGA-vj9c-7qqq-q4mqCGA-vp24-rr7r-2j7pCGA-vwg7-m9wp-xc67CGA-w3m5-q4qq-mrvcCGA-w3v5-5mv4-x4w4CGA-w4fq-pcqx-5f69CGA-wc7c-qwcp-5p47CGA-wcwj-933g-xgh3CGA-wv5v-5x3m-9xf2CGA-ww6m-g6jc-gg2gCGA-xjh5-57cp-hqjpCGA-xp54-c84x-2gr2CGA-xvgw-7jp4-hp54CGA-xwgg-hvcm-crfrCGA-xx8m-h639-94v6CGA-3g23-8m29-87fhCGA-hpgr-gv4v-78x6CGA-4f55-5jwx-543rCGA-6g8v-3prw-g67hCGA-7fq9-fxfx-pq7cCGA-8pq7-f2cw-4f66CGA-9c99-hqgg-8c59CGA-cfhc-hc4q-m67pCGA-f8w3-3q7f-h8mfCGA-g6g5-4fpg-5365CGA-g9fw-mmh4-x9q5CGA-mq36-r43c-gp76CGA-r3g7-hxm8-3x4vCGA-v84q-994x-66hrCGA-w2c5-5qx3-4rq3CGA-wrff-p5x7-jqvgCGA-cg52-qmm2-mqmpCGA-6j7c-wfqm-gvfhCGA-c5cw-389g-g8vhCGA-cvvw-7j9f-qrgrCGA-fr7m-8qch-pg5pCGA-rff8-wr88-mwj3CGA-r8mp-m822-r88jCGA-jjvj-p3f5-5m8gCGA-vvrq-xjr3-25g8CGA-vxm7-7p25-p9wc
Advisory lineage Upstream: 0 Downstream: 41
Modified
Published: 21 Oct 2022, 00:00
Last modified:15 Apr 2025, 13:24
Vulnerability Summary
Overall Risk (default)
low
17/100 CVSS Score
4.3 MEDIUM
v3.1 (nvd)
EPSS Score
0.88% LOW
1% probability +0.62%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
21 Oct 2022, 00:00
Published
Vulnerability first disclosed
15 Apr 2025, 13:24
Last Modified
Vulnerability information updated
Description
A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability.
CVSS Metrics
- v3.1•LOW•Score: 3.1CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
- v3.1•MEDIUM•Score: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS Trends
Current EPSS score: 0.88%• Percentile: 58%
Techniques & Countermeasures
- CWE-404•Improper Resource Shutdown or Release
The product does not release or incorrectly releases a resource before it is made available for re-use.
- CWE-401•Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 0 | < 6.18.5-r0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 6.12.65-r1 | < 0
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 6.18.5-r0 | < 0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-headers
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 0 | < 6.18.5-r0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0
Showing first 50 affected entries in server-rendered view.
References (32)
- https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d0d51a97063db4704a5ef6bc978dddab1636a306
- https://vuldb.com/?id.211961
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
- https://ubuntu.com/security/CVE-2022-3646
- https://git.kernel.org/linus/d0d51a97063db4704a5ef6bc978dddab1636a306
- https://ubuntu.com/security/notices/USN-5791-1
- https://ubuntu.com/security/notices/USN-5792-1
- https://ubuntu.com/security/notices/USN-5793-1
- https://ubuntu.com/security/notices/USN-5791-2
- https://ubuntu.com/security/notices/USN-5792-2
- https://ubuntu.com/security/notices/USN-5793-2
- https://ubuntu.com/security/notices/USN-5791-3
- https://ubuntu.com/security/notices/USN-5793-3
- https://ubuntu.com/security/notices/USN-5793-4
- https://ubuntu.com/security/notices/USN-5815-1
- https://ubuntu.com/security/notices/USN-5854-1
- https://ubuntu.com/security/notices/USN-5861-1
- https://ubuntu.com/security/notices/USN-5862-1
- https://ubuntu.com/security/notices/USN-5865-1
- https://ubuntu.com/security/notices/USN-5877-1
- https://ubuntu.com/security/notices/USN-5883-1
- https://ubuntu.com/security/notices/USN-5919-1
- https://ubuntu.com/security/notices/USN-5924-1
- https://ubuntu.com/security/notices/USN-5975-1
- https://ubuntu.com/security/notices/USN-5976-1
- https://ubuntu.com/security/notices/USN-6001-1
- https://ubuntu.com/security/notices/USN-6007-1
- https://ubuntu.com/security/notices/USN-6013-1
- https://ubuntu.com/security/notices/USN-6014-1
- https://www.cve.org/CVERecord?id=CVE-2022-3646
- https://security-tracker.debian.org/tracker/CVE-2022-3646