CVE-2022-3649

HighCVSS 7.0/10Last modified Oct 14, 2026

Description

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Oct 21, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-364907.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.CVE-2022-364917.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.CVE-2022-364927.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.CVE-2022-364937.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.CVE-2022-364947.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.CVE-2022-364957.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist.CVE-2022-364967.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.CVE-2022-364977.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.CVE-2022-364987.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.CVE-2022-364997.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup.CVE-2022-36507.8A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crCVE-2022-365007.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList.
CVE-2022-3649: High severity, CVSS 7.0 | Vulnix