CVE-2022-3541

Se ha encontrado una vulnerabilidad clasificada como crítica en el Kernel de Linux. Afecta a la función spl2sw_nvmem_get_mac_address del fichero drivers/net/ethernet/sunplus/spl2sw_driver.c del componente BPF. La manipulación conlleva el uso después de libre. Es recomendado aplicar un parche para corregir este problema. El identificador VDB-211041 fue asignado a esta vulnerabilidad

It was discovered that the io_uring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.