{"id":"CVE-2022-3534","aliases":["BELL-CVE-2022-3534","CLSA-2024-1722533082","CLSA-2024-1722977546","CLSA-2024-1722977984","DEBIAN-CVE-2022-3534","DLA-4137-1","EUVD-2022-42900","GHSA-gfpq-px23-jj9f","MGASA-2023-0007","MGASA-2023-0008","OESA-2022-2033","SUSE-SU-2023:0405-1","UBUNTU-CVE-2022-3534","USN-5759-1","USN-5759-2","USN-6215-1","openSUSE-SU-2024:12491-1"],"status":"published","title":"Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free","description":"A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.","severity":{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00963,"percentile":0.61938,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-416"],"published":"2022-10-17T00:00:00Z","modified":"2026-11-03T08:02:20Z","fixes":[{"ecosystem":"Debian:12","package":"libbpf","fixed_in":["1.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libbpf","fixed_in":["1.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libbpf","fixed_in":["1.1.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dwarves-dfsg","fixed_in":["1.21-0ubuntu1~18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dwarves-dfsg","fixed_in":["1.21-0ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libbpf","fixed_in":["0.5.0-1~ubuntu20.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libbpf","fixed_in":["0.5.0-1ubuntu22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2.tuxcare.els5"}]}],"bundled":47},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els18"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els18"}]}],"bundled":16},{"source":"osv","ecosystem":"Debian:12","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3-2+deb11u1"}]}],"versions":["0.3-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.88-1.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.4-1.4.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23-1.2.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23-1.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.88-1.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-60.63.0.89.oe2203"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dwarves-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10-2ubuntu1","1.10-2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dwarves-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-0ubuntu1~18.04.1+esm1"}]}],"versions":["1.10-2.1","1.10-2.1build1","1.21-0ubuntu1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dwarves-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-0ubuntu1~20.04.1"}]}],"versions":["1.15-1","1.15-2","1.21-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1~ubuntu20.04.1+esm1"}]}],"versions":["0.5.0-1~ubuntu20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1ubuntu22.04.1"}]}],"versions":["0.4.0-1ubuntu1","0.5.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1ubuntu22.04.1"}]}],"versions":["0.4.0-1ubuntu1","0.5.0-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libbpf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1~ubuntu20.04.1+esm1"}]}],"versions":["0.5.0-1~ubuntu20.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dwarves-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-0ubuntu1~18.04.1+esm1"}]}],"versions":["1.10-2.1","1.10-2.1build1","1.21-0ubuntu1~18.04"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dwarves-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-0ubuntu1~20.04.1"}]}],"versions":["1.15-1","1.15-2","1.21-0ubuntu1~20.04"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"kernel"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"}],"references":[{"url":"https://vuldb.com/vuln/211032","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/vuln/211032/cti","tags":["signature","permissions-required","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/cve/CVE-2022-3534","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=93c660ca40b5d2f7c1b1626e955a8e9fa30e0749","tags":["patch","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://www.kernel.org/","tags":["product","Product"]},{"url":"https://vuldb.com/?id.211032","tags":["x_transferred","Permissions Required","Third Party Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00033.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3534","tags":["advisory"]},{"url":"https://www.kernel.org"},{"url":"https://github.com/advisories/GHSA-gfpq-px23-jj9f"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-3534","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1722533082.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1722977546.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2024-1722977984.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0500","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48855","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-26852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-26923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39494","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3534","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0007.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31405","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31319","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.83","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.84","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.85","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.86","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.87","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.88","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2023-0008.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31406","tags":["report"]},{"url":"https://xenbits.xenproject.org/xsa/advisory-423.txt","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20409","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42722","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3577","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230405-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204391","tags":["report"]},{"url":"https://bugzilla.suse.com/1204502","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3606","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-3534","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5759-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5759-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6215-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-45940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-45941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3606","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3533","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-3534","title":"Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free","description":"A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.","status":"published","published":"2022-10-17T00:00:00Z","modified":"2026-10-14T13:42:36.247Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","level":"medium","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","level":"medium","assessor":"cna"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","level":"medium","assessor":"cna"},{"version":"2.0","score":4.9,"vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-416","CWE-119"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-42900","description":"A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.","status":"published","published":"2022-10-17T00:00:00Z","modified":"2026-10-14T13:42:36Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","level":"medium"}],"updated_at":"2026-11-02T17:27:15.581093Z"}],"ghsa":[{"id":"GHSA-gfpq-px23-jj9f","title":"A vulnerability classified as critical has been found in Linux Kernel. Affected is the function...","description":"A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.","status":"published","published":"2022-10-17T12:00:26Z","modified":"2026-10-14T15:31:16Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-416"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2022-3534","description":"A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.","status":"published","published":"2022-10-17T09:15:12.75Z","modified":"2026-10-14T14:17:23.94Z","cvss":[{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:A/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-119","CWE-416"],"updated_at":"2026-11-02T14:07:30.6869Z"}],"osv":[{"id":"BELL-CVE-2022-3534","title":"CVE-2022-3534 does not affect BellSoft software","status":"withdrawn","published":"2022-10-17T09:15:00Z","modified":"2026-01-26T09:46:31.826785Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-3534","description":"A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.","status":"published","published":"2022-10-17T09:15:12Z","modified":"2026-04-16T04:35:41.929993592Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.195407Z"},{"id":"DEBIAN-CVE-2022-3534","description":"A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.","status":"published","published":"2022-10-17T09:15:12.75Z","modified":"2026-11-03T08:02:20.602258371Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-2033","title":"kernel security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nIn io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238177383References: Upstream kernel(CVE-2022-20409)\r\n\r\nA vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.(CVE-2022-3524)\r\n\r\nA vulnerability classified as critical has been found in Linux Kernel. Affected is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211032.(CVE-2022-3534)\r\n\r\nA vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.(CVE-2022-3545)\r\n\r\nA vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.(CVE-2022-3564)\r\n\r\nA vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.(CVE-2022-3565)\r\n\r\nA vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability.(CVE-2022-3566)\r\n\r\nA vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.(CVE-2022-3567)\r\n\r\nA vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.(CVE-2022-3594)\r\n\r\nA vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.(CVE-2022-3649)\n\nIn the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.(CVE-2022-42722)\n\nA vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.(CVE-2022-3521)\n\nA flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.(CVE-2022-3586)\n\nVUL-0: CVE-2022-2602: kernel: defer registered files gc to io_uring release(CVE-2022-2602)\n\nA vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.(CVE-2022-3633)\n\nAn out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.(CVE-2022-3577)","status":"published","published":"2022-10-29T11:05:21Z","modified":"2026-08-18T01:17:21.38185635Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2022-3534","description":"A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.","status":"published","published":"2022-10-17T09:15:00Z","modified":"2026-10-28T20:15:18.157125719Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":5.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CLSA-2024-1722533082","title":"kernel: Fix of 47 CVEs","description":"- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}\n- netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}\n- libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}\n- bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}\n- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}\n- ima: define ima_max_digest_data struct without a flexible array variable\n- ima: detect changes to the backing overlay file\n- tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}\n- tty: n_gsm: fix restart handling via CLD command\n- r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}\n- netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}\n- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}\n- Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464}\n- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841}\n- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}\n- tipc: fix UAF in error path {CVE-2024-36886}\n- Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}\n- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}\n- dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277}\n- net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}\n- net/mlx5e: Introduce flow steering API {CVE-2024-27014}\n- x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}\n- x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}\n- x86: Introduce ia32_enabled() {CVE-2024-25742}\n- x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}\n- x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}\n- RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744}\n- platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}\n- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059}\n- fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}\n- usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964}\n- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897}\n- wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}\n- RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743}\n- wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}\n- x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}\n- wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}\n- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}\n- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528}\n- RDMA/siw: Fix connection failure handling {CVE-2023-52513}\n- usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}\n- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185}\n- sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}\n- memcg: enable accounting for file lock caches {CVE-2022-0480}\n- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}\n- RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}\n- drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}\n- net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}\n- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902}\n- ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}\n- vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}\n- hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}\n- i2c: Fix a potential use after free {CVE-2019-25162}\n- net/smc: fix illegal rmb_desc access in SMC-D connection dump {CVE-2024-26615}","status":"published","published":"2024-08-01T17:34:23Z","modified":"2026-10-21T10:45:17.555687229Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1722977546","title":"kernel: Fix of 15 CVEs","description":"- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}\n- ima: define ima_max_digest_data struct without a flexible array variable\n- ima: detect changes to the backing overlay file\n- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}\n- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}\n- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}\n- net/mlx5: Fix a race on command flush flow {CVE-2022-48858}\n- sctp: fix kernel-infoleak for SCTP sockets {CVE-2022-48855}\n- libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}\n- net: fix __dst_negative_advice() race {CVE-2024-36971}\n- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' {CVE-2021-33631}\n- tipc: fix UAF in error path {CVE-2024-36886}\n- smb: client: fix parsing of SMB3.1.1 POSIX create context {CVE-2023-52434}\n- smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}\n- perf: Disallow mis-matched inherited group reads {CVE-2023-5717}\n- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622}\n- sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}\n- i2c: Fix a potential use after free {CVE-2019-25162}","status":"published","published":"2024-08-06T20:55:20Z","modified":"2026-10-21T10:48:05.638535648Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1722977984","title":"kernel: Fix of 17 CVEs","description":"- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}\n- ima: define ima_max_digest_data struct without a flexible array variable\n- ima: detect changes to the backing overlay file\n- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}\n- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}\n- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}\n- net/mlx5: Fix a race on command flush flow {CVE-2022-48858}\n- sctp: fix kernel-infoleak for SCTP sockets {CVE-2022-48855}\n- bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. {CVE-2022-0500}\n- bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. {CVE-2022-0500}\n- bpf: Introduce MEM_RDONLY flag {CVE-2022-0500}\n- bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL {CVE-2022-0500}\n- bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL {CVE-2022-0500}\n- bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL {CVE-2022-0500}\n- bpf: Introduce composable reg, ret and arg types. {CVE-2022-0500}\n- bpf: Extract nullable reg type conversion into a helper function {CVE-2022-0500}\n- bpf: Rename bpf_reg_state variables {CVE-2022-0500}\n- libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}\n- net: fix __dst_negative_advice() race {CVE-2024-36971}\n- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' {CVE-2021-33631}\n- tipc: fix UAF in error path {CVE-2024-36886}\n- smb: client: fix parsing of SMB3.1.1 POSIX create context {CVE-2023-52434}\n- smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}\n- perf: Disallow mis-matched inherited group reads {CVE-2023-5717}\n- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622}\n- sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}\n- i2c: Fix a potential use after free {CVE-2019-25162}","status":"published","published":"2026-10-18T04:20:04Z","modified":"2026-10-26T09:31:44.748523223Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DLA-4137-1","title":"libbpf - security update","status":"published","published":"2025-04-24T00:00:00Z","modified":"2026-03-09T01:20:54.055481Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0007","title":"Updated kernel packages fix security vulnerabilities","description":"This kernel update is based on upstream 5.15.88 and fixes atleast the\nfollowing security issues:\n\nA use-after-free flaw was found in the Linux kernel’s SGI GRU driver in\nthe way the first gru_file_unlocked_ioctl function is called by the user,\nwhere a fail pass occurs in the gru_check_chiplet_assignment function.\nThis flaw allows a local user to crash or potentially escalate their\nprivileges on the system (CVE-2022-3424).\n\nA vulnerability in the function btf_dump_name_dups of the file \ntools/lib/bpf/ btf_dump.c of the component libbpf. This flaw allows a\nmanipulation that may lea to a use-after-free issue (CVE-2022-3534).\n\nA vulnerability was found in area_cache_get in drivers/net/ethernet/\nnetronome/nfp/nfpcore/nfp_cppcore.c in the Netronome Flow Processor (NFP)\ndriver in the Linux kernel. This flaw allows a manipulation that may lead\nto a use-after-free issue (CVE-2022-3545).\n\nAn out-of-bounds memory write vulnerability was found in the Linux kernel\nvmwgfx driver in vmw_kms_cursor_snoop due to a missing check of a memcpy\nlength. This flaw allows a local, unprivileged attacker with access to\neither the /dev/dri/card0 or /dev/dri/rendererD128 and able to issue an\nioctl() on the resulting file descriptor, to crash the system, causing\na denial of service (CVE-2022-36280).\n\nA use-after-free flaw was found in the Linux kernel’s dvb-core subsystem\n(DVB API used by Digital TV devices) in how a user physically removed a\nUSB device (such as a DVB demultiplexer device) while running malicious\ncode. This flaw allows a local user to crash or potentially escalate their\nprivileges on the system (CVE-2022-41218).\n\nAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req\nin net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ\npackets (CVE-2022-45934).\n\nIn the Linux kernel before 6.1.6, a NULL pointer dereference bug in the\ntraffic control subsystem allows an unprivileged user to trigger a denial\nof service (system crash) via a crafted traffic control configuration that\nis set up with \"tc qdisc\" and \"tc class\" commands. This affects qdisc_graft\nin net/sched/sch_api.c (CVE-2022-47929).\n\nA buffer overflow vulnerability was found in the Netfilter subsystem in the\nLinux Kernel. This issue could allow the leakage of both stack and heap\naddresses, and potentially allow Local Privilege Escalation to the root\nuser via arbitrary code execution (CVE-2023-0179).\n\nA vulnerability in the kernel ksmbd allows a remote attacker to perform a\ndenial of service (DoS) attack. The vulnerability exists due to a boundary\nerror within the ksmbd_decode_ntlmssp_auth_blob() function in ksmbd when\nhandling NTLMv2 authentication. A remote attacker can send specially\ncrafted data to ksmbd, trigger a heap-based buffer overflow and perform a\ndenial of service (DoS) attack (CVE-2023-0210).\n\nALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF\n(CVE-2023-0266).\n\ncbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows\nattackers to cause a denial of service (slab-out-of-bounds read) because of\ntype confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT\ncondition rather than valid classification results) (CVE-2023-23454).\n\natm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4\nallows attackers to cause a denial of service because of type confusion\n(non-negative numbers can sometimes indicate a TC_ACT_SHOT condition\nrather than valid classification results) (CVE-2023-23455).\n\nOther fixes in this update:\n- fixes broken sound on Intel Tiger Lake systems (regression in kernel\n  5.15.82 released in MGASA-2022-0477 (mga #31319).\n- xtables-addons have been updated to 3.23.\n\nFor other upstream fixes in this update, see the referenced changelogs.\n","status":"published","published":"2023-01-22T20:39:23Z","modified":"2026-04-16T04:41:32.751713334Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"MGASA-2023-0008","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream 5.15.88 and fixes atleast\nthe following security issues:\n\nA use-after-free flaw was found in the Linux kernel’s SGI GRU driver in\nthe way the first gru_file_unlocked_ioctl function is called by the user,\nwhere a fail pass occurs in the gru_check_chiplet_assignment function.\nThis flaw allows a local user to crash or potentially escalate their\nprivileges on the system (CVE-2022-3424).\n\nA vulnerability in the function btf_dump_name_dups of the file \ntools/lib/bpf/ btf_dump.c of the component libbpf. This flaw allows a\nmanipulation that may lea to a use-after-free issue (CVE-2022-3534).\n\nA vulnerability was found in area_cache_get in drivers/net/ethernet/\nnetronome/nfp/nfpcore/nfp_cppcore.c in the Netronome Flow Processor (NFP)\ndriver in the Linux kernel. This flaw allows a manipulation that may lead\nto a use-after-free issue (CVE-2022-3545).\n\nGuests can trigger NIC interface reset/abort/crash via netback. It is\npossible for a guest to trigger a NIC interface reset/abort/crash in a\nLinux based network backend by sending certain kinds of packets. It appears\nto be an (unwritten?) assumption in the rest of the Linux network stack\nthat packet  protocol headers are all contained within the linear section\nof the SKB and some NICs behave badly if this is not the case. This has\nbeen reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780\n(bnx2x) though it may be an issue with other NICs/drivers as well. In case\nthe frontend is sending requests with split headers, netback will forward\nthose violating above mentioned assumption to the networking core,\nresulting in said misbehavior (CVE-2022-3643, XSA-423).\n\nAn out-of-bounds memory write vulnerability was found in the Linux kernel\nvmwgfx driver in vmw_kms_cursor_snoop due to a missing check of a memcpy\nlength. This flaw allows a local, unprivileged attacker with access to\neither the /dev/dri/card0 or /dev/dri/rendererD128 and able to issue an\nioctl() on the resulting file descriptor, to crash the system, causing\na denial of service (CVE-2022-36280).\n\nA use-after-free flaw was found in the Linux kernel’s dvb-core subsystem\n(DVB API used by Digital TV devices) in how a user physically removed a\nUSB device (such as a DVB demultiplexer device) while running malicious\ncode. This flaw allows a local user to crash or potentially escalate their\nprivileges on the system (CVE-2022-41218).\n\nAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req\nin net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ\npackets (CVE-2022-45934).\n\nIn the Linux kernel before 6.1.6, a NULL pointer dereference bug in the\ntraffic control subsystem allows an unprivileged user to trigger a denial\nof service (system crash) via a crafted traffic control configuration that\nis set up with \"tc qdisc\" and \"tc class\" commands. This affects qdisc_graft\nin net/sched/sch_api.c (CVE-2022-47929).\n\nA vulnerability in the kernel ksmbd allows a remote attacker to perform a\ndenial of service (DoS) attack. The vulnerability exists due to a boundary\nerror within the ksmbd_decode_ntlmssp_auth_blob() function in ksmbd when\nhandling NTLMv2 authentication. A remote attacker can send specially\ncrafted data to ksmbd, trigger a heap-based buffer overflow and perform a\ndenial of service (DoS) attack (CVE-2023-0210).\n\nALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF\n(CVE-2023-0266).\n\ncbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows\nattackers to cause a denial of service (slab-out-of-bounds read) because of\ntype confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT\ncondition rather than valid classification results) (CVE-2023-23454).\n\natm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4\nallows attackers to cause a denial of service because of type confusion\n(non-negative numbers can sometimes indicate a TC_ACT_SHOT condition\nrather than valid classification results) (CVE-2023-23455).\n\nFor other upstream fixes in this update, see the referenced changelogs.\n","status":"published","published":"2023-01-22T20:39:23Z","modified":"2026-04-16T04:43:08.669231621Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12491-1","title":"libbpf-devel-1.0.1-2.1 on GA media","description":"These are all security issues fixed in the libbpf-devel-1.0.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:20.813825Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0405-1","title":"Security update for libbpf","description":"This update for libbpf fixes the following issues:\n\n  - CVE-2022-3534: Fixed use-after-free in btf_dump_name_dups (bsc#1204391).\n  - CVE-2022-3606: Fixed null pointer dereference in find_prog_by_sec_insn() (bsc#1204502).\n","status":"published","published":"2023-02-14T10:48:07Z","modified":"2026-02-04T02:57:03.137692Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5759-1","title":"libbpf vulnerabilities","description":"It was discovered that LibBPF incorrectly handled certain memory operations\nunder certain circumstances. An attacker could possibly use this issue to\ncause LibBPF to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 22.10.\n(CVE-2021-45940, CVE-2021-45941, CVE-2022-3533)\n\nIt was discovered that LibBPF incorrectly handled certain memory operations\nunder certain circumstances. An attacker could possibly use this issue to\ncause LibBPF to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2022-3534, CVE-2022-3606)\n","status":"published","published":"2022-12-05T08:43:17Z","modified":"2026-07-30T16:00:28.795682832Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5759-2","title":"libbpf vulnerabilities","description":"USN-5759-1 fixed vulnerabilities in LibBPF. This update provides the\ncorresponding updates for Ubuntu 20.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that LibBPF incorrectly handled certain memory operations\n under certain circumstances. An attacker could possibly use this issue to\n cause LibBPF to crash, resulting in a denial of service, or possibly\n execute arbitrary code. This issue only affected Ubuntu 22.10.\n (CVE-2021-45940, CVE-2021-45941, CVE-2022-3533)\n \n It was discovered that LibBPF incorrectly handled certain memory operations\n under certain circumstances. An attacker could possibly use this issue to\n cause LibBPF to crash, resulting in a denial of service, or possibly\n execute arbitrary code. (CVE-2022-3534, CVE-2022-3606)\n","status":"published","published":"2022-12-08T09:40:00Z","modified":"2026-07-30T16:00:34.749130929Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-6215-1","title":"dwarves-dfsg vulnerabilities","description":"It was discovered that dwarves incorrectly handled certain memory\noperations under certain circumstances. An attacker could possibly use this\nissue to cause dwarves to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2022-3534, CVE-2022-3606)\n","status":"published","published":"2023-07-11T06:36:47Z","modified":"2026-07-30T16:00:36.002561418Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}