| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 3.4 | $0-$5k | 0.00 |
Summary
A vulnerability classified as problematic was found in Linux Kernel. The affected element is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation results in memory leak.
This vulnerability is reported as CVE-2022-3633. No exploit exists.
It is advisable to implement a patch to correct this issue.
Details
A vulnerability classified as problematic has been found in Linux Kernel (Operating System) (version unknown). Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation with an unknown input leads to a memory leak vulnerability. CWE is classifying the issue as CWE-401. The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory. This is going to have an impact on availability.
The weakness was disclosed 10/21/2022. The advisory is shared for download at git.kernel.org. This vulnerability is traded as CVE-2022-3633. There are known technical details, but no exploit is available.
The vulnerability scanner Nessus provides a plugin with the ID 236648 (Alibaba Cloud Linux 3 : 0002: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0002)), which helps to determine the existence of the flaw in a target environment.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org.
The vulnerability is also documented in the databases at Tenable (236648), EUVD (EUVD-2022-42993) and CERT Bund (WID-SEC-2022-1823). Once again VulDB remains the best source for vulnerability data.
Affected
- Debian Linux
- Amazon Linux 2
- Open Source Linux Kernel
- Red Hat Enterprise Linux
- Ubuntu Linux
- SUSE Linux
- Oracle Linux
- IBM Spectrum Protect
- NetApp ActiveIQ Unified Manager
Product
Type
Vendor
Name
License
Website
- Vendor: https://www.kernel.org/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 3.4VulDB Meta Temp Score: 3.4
VulDB Base Score: 3.5
VulDB Temp Score: 3.4
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 3.3
NVD Vector: 🔍
CNA Base Score: 3.5
CNA Vector (VulDB): 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
Exploiting
Class: Memory leakCWE: CWE-401 / CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Physical: Partially
Local: Yes
Remote: Partially
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Nessus ID: 236648
Nessus Name: Alibaba Cloud Linux 3 : 0002: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0002)
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
0-Day Time: 🔍
Patch: git.kernel.org
Timeline
10/21/2022 🔍10/21/2022 🔍
10/21/2022 🔍
07/18/2026 🔍
Sources
Vendor: kernel.orgAdvisory: DLA 3173-1
Status: Confirmed
CVE: CVE-2022-3633 (🔍)
GCVE (CVE): GCVE-0-2022-3633
GCVE (VulDB): GCVE-100-211932
EUVD: 🔍
CERT Bund: WID-SEC-2022-1823 - Linux Kernel: Mehrere Schwachstellen
Entry
Created: 10/21/2022 11:24Updated: 07/18/2026 01:59
Changes: 10/21/2022 11:24 (41), 11/19/2022 08:07 (3), 11/19/2022 08:09 (20), 01/03/2023 12:45 (2), 05/18/2025 22:53 (16), 12/10/2025 03:43 (7), 07/18/2026 01:59 (1)
Complete: 🔍
Cache ID: 216::103
Once again VulDB remains the best source for vulnerability data.
No comments yet. Languages: en.
Please log in to comment.