Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-3526 EUVD-2022-42892GHSA-ffmj-8phg-m99p

Linux Kernel skb macvlan.c macvlan_handle_frame memory leak

Published Oct 16, 2022 · Updated Apr 14, 2025 · Assigned by VulDB

Description

A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.

Affected products

VendorProductAffectedFixed
Linux Kernel — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.17.6-1 —
Debian 13 linux 5.17.6-1 —
Debian 12 linux 5.17.6-1 —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux +1 5.15.0-37.39 —
Ubuntu 22.04 LTS linux-aws 5.15.0-1011.14 —
Ubuntu 22.04 LTS linux-azure 5.15.0-1010.12 —
Ubuntu 22.04 LTS linux-gcp 5.15.0-1008.12 —
Ubuntu 22.04 LTS linux-gke 5.15.0-1008.10 —
Ubuntu 22.04 LTS linux-ibm 5.15.0-1007.8 —
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1008.11 —
Ubuntu 22.04 LTS linux-kvm 5.15.0-1010.11 —
Ubuntu 22.04 LTS linux-oem-5.17 5.17.0-1011.12 —
Ubuntu 22.04 LTS linux-oracle 5.15.0-1009.12 —
Ubuntu 22.04 LTS linux-raspi 5.15.0-1011.13 —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-azure-5.15 5.15.0-1008.9~20.04.1 —
Ubuntu 20.04 LTS linux-hwe-5.15 5.15.0-41.44~20.04.1 —
Ubuntu 20.04 LTS linux-intel-iotg-5.15 5.15.0-1008.11~20.04.1 —
Ubuntu 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-42.45~20.04.1 —
Ubuntu 20.04 LTS linux-oem-5.14 5.14.0-1036.40 —
Ubuntu 20.04 LTS linux-riscv +22 No fix yet —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1014.14 —
ReleasePackageFixed inAdvisory
SLES 15 SP4 kernel-64kb +3 5.14.21-150400.24.33.2 SUSE-SU-2022:4072-1
SLES 15 SP4 kernel-azure 5.14.21-150400.14.21.2 SUSE-SU-2022:3998-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.33.2.150400.24.11.4 SUSE-SU-2022:4072-1
SLES 15 SP4 kernel-syms +2 5.14.21-150400.24.33.1 SUSE-SU-2022:4072-1
SLES 15 SP4 kernel-syms-azure +1 5.14.21-150400.14.21.1 SUSE-SU-2022:3998-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 5.3 kernel-default 5.14.21-150400.24.33.2 SUSE-SU-2022:4072-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.33.2.150400.24.11.4 SUSE-SU-2022:4072-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.33.2 SUSE-SU-2022:4072-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_1 1-150400.1.3.1 SUSE-SU-2022:4617-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_5 1-150400.9.3.4 SUSE-SU-2022:4072-1
SUSE Real Time Module 15 SP4 kernel-rt +3 5.14.21-150400.15.5.1 SUSE-SU-2022:4617-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.4 dtb-aarch64 +4 5.14.21-150400.24.33.1 SUSE-SU-2022:4072-1
openSUSE Leap 15.4 kernel-64kb +5 5.14.21-150400.24.33.2 SUSE-SU-2022:4072-1
openSUSE Leap 15.4 kernel-azure 5.14.21-150400.14.21.2 SUSE-SU-2022:3998-1
openSUSE Leap 15.4 kernel-default-base 5.14.21-150400.24.33.2.150400.24.11.4 SUSE-SU-2022:4072-1
openSUSE Leap 15.4 kernel-rt +3 5.14.21-150400.15.5.1 SUSE-SU-2022:4617-1
openSUSE Leap 15.4 kernel-syms-azure +1 5.14.21-150400.14.21.1 SUSE-SU-2022:3998-1

Advisories 4

References