Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.9
CVE-2022-3028: Linux IP Framework Packet Transformation Vulnerability - Local Data Leak
CVE-2022-3028 · published 4 years ago
Summary
A flaw in the Linux kernel's IP packet transformation system could allow a local attacker to access sensitive data or cause the system to run out of memory. This vulnerability affects Linux systems and can be exploited by a user with local access. To protect your system, ensure you have the latest Linux kernel updates installed.
What to do
- Update canonical linux-aws to version 4.4.0-1113.119.
- Update canonical linux-azure to version 4.15.0-1157.172~14.04.2.
- Update canonical linux-lts-xenial to version 4.4.0-234.268~14.04.1.
- Update canonical linux to version 4.4.0-234.268.
- Update canonical linux-aws to version 4.4.0-1151.166.
- Update canonical linux-aws-hwe to version 4.15.0-1143.155~16.04.1.
- Update canonical linux-azure to version 4.15.0-1159.174~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1138.154~16.04.1.
- Update canonical linux-hwe to version 4.15.0-197.208~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1114.124.
- Update canonical linux-oracle to version 4.15.0-1108.119~16.04.1.
- Update canonical linux-fips to version 4.4.0-1083.90.
- Update canonical linux to version 4.15.0-197.208.
- Update canonical linux-aws to version 4.15.0-1143.155.
- Update canonical linux-aws-5.4 to version 5.4.0-1089.97~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1157.172.
- Update canonical linux-azure-5.4 to version 5.4.0-1095.101~18.04.1.
- Update canonical linux-dell300x to version 4.15.0-1055.60.
- Update canonical linux-gcp-4.15 to version 4.15.0-1138.154.
- Update canonical linux-gcp-5.4 to version 5.4.0-1093.102~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-132.148~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1037.42~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1129.134.
- Update canonical linux-oracle to version 4.15.0-1108.119.
- Update canonical linux-oracle-5.4 to version 5.4.0-1087.96~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1074.85~18.04.1.
- Update canonical linux-raspi2 to version 4.15.0-1121.129.
- Update canonical linux-snapdragon to version 4.15.0-1139.149.
- Update canonical linux-aws-fips to version 4.15.0-2082.88.
- Update canonical linux-azure-fips to version 4.15.0-2066.72.
- Update canonical linux-fips to version 4.15.0-1100.111.
- Update canonical linux-gcp-fips to version 4.15.0-2047.52.
- Update canonical linux to version 5.4.0-132.148.
- Update canonical linux-aws to version 5.4.0-1089.97.
- Update canonical linux-aws-5.15 to version 5.15.0-1023.27~20.04.1.
- Update canonical linux-azure to version 5.4.0-1095.101.
- Update canonical linux-azure-5.15 to version 5.15.0-1023.29~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1050.56.
- Update canonical linux-gcp to version 5.4.0-1093.102.
- Update canonical linux-gcp-5.15 to version 5.15.0-1022.29~20.04.1.
- Update canonical linux-gke to version 5.4.0-1087.94.
- Update canonical linux-gke-5.15 to version 5.15.0-1020.25~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1057.61.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1008.12~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-53.59~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1037.42.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1018.23~20.04.1.
- Update canonical linux-iot to version 5.4.0-1006.8.
- Update canonical linux-kvm to version 5.4.0-1079.85.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-53.59~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1087.96.
- Update canonical linux-oracle-5.15 to version 5.15.0-1022.28~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1074.85.
- Update canonical linux-riscv-5.15 to version 5.15.0-1023.27~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1089.97+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1095.101+fips1.
- Update canonical linux-fips to version 5.4.0-1065.74.
- Update canonical linux-gcp-fips to version 5.4.0-1093.102+fips1.
- Update canonical linux to version 5.15.0-53.59.
- Update canonical linux-aws to version 5.15.0-1023.27.
- Update canonical linux-azure to version 5.15.0-1023.29.
- Update canonical linux-azure-fde to version 5.15.0-1024.30.1.
- Update canonical linux-gcp to version 5.15.0-1022.29.
- Update canonical linux-gke to version 5.15.0-1020.25.
- Update canonical linux-gkeop to version 5.15.0-1008.12.
- Update canonical linux-ibm to version 5.15.0-1018.21.
- Update canonical linux-intel-iotg to version 5.15.0-1018.23.
- Update canonical linux-kvm to version 5.15.0-1021.26.
- Update canonical linux-lowlatency to version 5.15.0-53.59.
- Update canonical linux-nvidia to version 5.15.0-1015.15.
- Update canonical linux-oem-5.17 to version 5.17.0-1020.21.
- Update canonical linux-oracle to version 5.15.0-1022.28.
- Update canonical linux-raspi to version 5.15.0-1018.20.
- Update canonical linux-riscv to version 5.15.0-1023.27.
- Update canonical linux-realtime to version 5.15.0-1025.28.
- Update debian linux to version 5.19.6-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1113.119 Fix: upgrade to 4.4.0-1113.119
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1157.172~14.04.2 Fix: upgrade to 4.15.0-1157.172~14.04.2
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-234.268~14.04.1 Fix: upgrade to 4.4.0-234.268~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-234.268 Fix: upgrade to 4.4.0-234.268
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1151.166 Fix: upgrade to 4.4.0-1151.166
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1143.155~16.04.1 Fix: upgrade to 4.15.0-1143.155~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1159.174~16.04.1 Fix: upgrade to 4.15.0-1159.174~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1138.154~16.04.1 Fix: upgrade to 4.15.0-1138.154~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-197.208~16.04.1 Fix: upgrade to 4.15.0-197.208~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1114.124 Fix: upgrade to 4.4.0-1114.124
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1108.119~16.04.1 Fix: upgrade to 4.15.0-1108.119~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1083.90 Fix: upgrade to 4.4.0-1083.90
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-197.208 Fix: upgrade to 4.15.0-197.208
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1143.155 Fix: upgrade to 4.15.0-1143.155
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1089.97~18.04.1 Fix: upgrade to 5.4.0-1089.97~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1157.172 Fix: upgrade to 4.15.0-1157.172
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1095.101~18.04.1 Fix: upgrade to 5.4.0-1095.101~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-dell300x |
< 4.15.0-1055.60 Fix: upgrade to 4.15.0-1055.60
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1138.154 Fix: upgrade to 4.15.0-1138.154
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1093.102~18.04.1 Fix: upgrade to 5.4.0-1093.102~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-132.148~18.04.1 Fix: upgrade to 5.4.0-132.148~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1037.42~18.04.1 Fix: upgrade to 5.4.0-1037.42~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1129.134 Fix: upgrade to 4.15.0-1129.134
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1108.119 Fix: upgrade to 4.15.0-1108.119
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1087.96~18.04.1 Fix: upgrade to 5.4.0-1087.96~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1074.85~18.04.1 Fix: upgrade to 5.4.0-1074.85~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1121.129 Fix: upgrade to 4.15.0-1121.129
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1139.149 Fix: upgrade to 4.15.0-1139.149
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2082.88 Fix: upgrade to 4.15.0-2082.88
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2066.72 Fix: upgrade to 4.15.0-2066.72
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1100.111 Fix: upgrade to 4.15.0-1100.111
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2047.52 Fix: upgrade to 4.15.0-2047.52
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
Showing 50 of 136. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-132.148 Fix: upgrade to 5.4.0-132.148
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1089.97 Fix: upgrade to 5.4.0-1089.97
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1023.27~20.04.1 Fix: upgrade to 5.15.0-1023.27~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1095.101 Fix: upgrade to 5.4.0-1095.101
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1023.29~20.04.1 Fix: upgrade to 5.15.0-1023.29~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1050.56 Fix: upgrade to 5.4.0-1050.56
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1093.102 Fix: upgrade to 5.4.0-1093.102
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1022.29~20.04.1 Fix: upgrade to 5.15.0-1022.29~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1087.94 Fix: upgrade to 5.4.0-1087.94
|
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 |
< 5.15.0-1020.25~20.04.1 Fix: upgrade to 5.15.0-1020.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1057.61 Fix: upgrade to 5.4.0-1057.61
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1008.12~20.04.1 Fix: upgrade to 5.15.0-1008.12~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-53.59~20.04.1 Fix: upgrade to 5.15.0-53.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1037.42 Fix: upgrade to 5.4.0-1037.42
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1018.23~20.04.1 Fix: upgrade to 5.15.0-1018.23~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1006.8 Fix: upgrade to 5.4.0-1006.8
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1079.85 Fix: upgrade to 5.4.0-1079.85
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-53.59~20.04.1 Fix: upgrade to 5.15.0-53.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1087.96 Fix: upgrade to 5.4.0-1087.96
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1022.28~20.04.1 Fix: upgrade to 5.15.0-1022.28~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1074.85 Fix: upgrade to 5.4.0-1074.85
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1023.27~20.04.1 Fix: upgrade to 5.15.0-1023.27~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1089.97+fips1 Fix: upgrade to 5.4.0-1089.97+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1095.101+fips1 Fix: upgrade to 5.4.0-1095.101+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1065.74 Fix: upgrade to 5.4.0-1065.74
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1093.102+fips1 Fix: upgrade to 5.4.0-1093.102+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-53.59 Fix: upgrade to 5.15.0-53.59
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1023.27 Fix: upgrade to 5.15.0-1023.27
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1023.29 Fix: upgrade to 5.15.0-1023.29
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1024.30.1 Fix: upgrade to 5.15.0-1024.30.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1022.29 Fix: upgrade to 5.15.0-1022.29
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1020.25 Fix: upgrade to 5.15.0-1020.25
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1008.12 Fix: upgrade to 5.15.0-1008.12
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1018.21 Fix: upgrade to 5.15.0-1018.21
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1018.23 Fix: upgrade to 5.15.0-1018.23
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1021.26 Fix: upgrade to 5.15.0-1021.26
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-53.59 Fix: upgrade to 5.15.0-53.59
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 |
< 5.17.0-1020.21 Fix: upgrade to 5.17.0-1020.21
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1022.28 Fix: upgrade to 5.15.0-1022.28
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1018.20 Fix: upgrade to 5.15.0-1018.20
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv |
< 5.15.0-1023.27 Fix: upgrade to 5.15.0-1023.27
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1025.28 Fix: upgrade to 5.15.0-1025.28
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Debian:12 | debian | linux |
< 5.19.6-1 Fix: upgrade to 5.19.6-1
|
| Debian:13 | debian | linux |
< 5.19.6-1 Fix: upgrade to 5.19.6-1
|
| Debian:14 | debian | linux |
< 5.19.6-1 Fix: upgrade to 5.19.6-1
|
| – | linux | linux_kernel |
>= 3.14, < 4.9.327 >= 4.10, < 4.14.292 >= 4.15, < 4.19.257 >= 4.20, < 5.4.212 >= 5.5, < 5.10.140 >= 5.11, < 5.15.64 >= 5.16, < 5.19.6 6.0 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
35 36 37 cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
| – | debian | debian_linux |
10.0 cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| – | – | linux kernel | Fixed in kernel 6.0-rc3 |
Original advisory text
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local...
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
References
- https://ubuntu.com/security/CVE-2022-3028 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2022-3028 Third Party Advisory
- https://lore.kernel.org/all/[email protected]/T/ Third Party Advisory
- https://ubuntu.com/security/notices/USN-5650-1 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3028.j... Vendor Advisory
- https://ubuntu.com/security/notices/USN-5693-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5729-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5727-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5729-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5728-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5774-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-3028 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html URL
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html URL
- https://lore.kernel.org/all/YtoWqEkKzvimzWS5%40gondor.apana.org.au/T/ URL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-3028 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230214-0004/ Vendor Advisory
- https://github.com/torvalds/linux/commit/ba953a9d89a00c078b85f4b190bc1dde66fe16b... Patch
- https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-3028 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
7.9
High
Type
CWE-667Improper Locking
CWE-362Race Condition
CWE-787Out-of-bounds Write
Timeline
Published31 Aug 2022
Updated4 Nov 2026
First seen2 Jul 2026
Sources
UBUNTU-CVE-2022-3028 · OSV
CVE-2022-3028 · NVD
DEBIAN-CVE-2022-3028 · OSV
CVE-2022-3028 · MITRE
CVE-2022-3028 · OSV
Track software like this
Free during beta