CVE-2022-3566: linux kernel

csirt@kutim:~/threat-intel/cve/CVE-2022-3566

CVSS 7.1 · High EPSS 0,70%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult. The vulnerability was introduced in 2.6.12, commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ("Linux-2.6.12-rc2"). Upgrading to version 4.19.317, 5.4.279, 5.10.221, 5.15.162 and 6.1 will fix this issue. The name of the patch is fcd31dd8291b23d713245947ec2b2d99ef07aef2/3b32f265805a49071e2c4568a524398ba22bf93c/d529193eae979a7bf2255cd9fe68b7af7a1c91b3/5bb642cc3355ffd3c8bca0a8bd8e6e65bcc2091c/f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57. The affected component should be upgraded.

Rincian

Terbit di NVD: 17 Oktober 2022
Terakhir diubah: 26 Agustus 2026
Status NVD: Analyzed
CVSS 3.1: 7.1 (High), sumber NVD
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
EPSS (30 hari): 0,70% peluang dieksploitasi; lebih tinggi dari 51,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 2.6.12 hingga sebelum 4.19.317
linux	linux kernel	Versi 4.20 hingga sebelum 5.4.279
linux	linux kernel	Versi 5.5 hingga sebelum 5.10.221
linux	linux kernel	Versi 5.11 hingga sebelum 5.15.162

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f49cd2f4d6170d27a2c61f1fecb03d8a70... patch · advisory pihak ketiga · advisory vendor
https://vuldb.com/cve/CVE-2022-3566 advisory pihak ketiga · vdb entry
https://vuldb.com/vuln/211089 advisory pihak ketiga · vdb entry
https://vuldb.com/?id.211089 advisory pihak ketiga
https://vuldb.com/vuln/211089/cti permissions required · vdb entry
https://www.kernel.org/ product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.