CVE-2022-3594

Se ha encontrado una vulnerabilidad en el Kernel de Linux. Ha sido declarada como problemática. Esta vulnerabilidad afecta a la función intr_callback del archivo drivers/net/usb/r8152.c del componente BPF. La manipulación conlleva a un registro de datos excesivos. El ataque puede ser lanzado de forma remota. Es recomendado aplicar un parche para corregir este problema. El identificador asociado a esta vulnerabilidad es VDB-211363

A vulnerability was found in intr_callback in drivers/net/usb/r8152.c in the BPF component in the Linux Kernel. The manipulation leads to logging excessive data, where an attack can be launched remotely.

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the video4linux driver for Empia based TV cards in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.