CVE-2022-36879

Published: Jul 27, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Affected (25)

Products: Linux: Linux Kernel · Debian: Debian Linux · Netapp: A700s Firmware, Active Iq Unified Manager, E Series Santricity Os Controller, Hci Bootstrap Os, Aff 8300 Firmware, Fas 8300 Firmware, Aff 8700 Firmware, Fas 8700 Firmware, Aff A400 Firmware, Fas A400 Firmware, Aff A250 Firmware, Fas A250 Firmware, Fas 500f Firmware, Aff 500f Firmware, H300s Firmware, H500s Firmware, H700s Firmware, H410s Firmware, H410c Firmware, H610c Firmware, H610s Firmware, H615c Firmware

1 product

1 product

22 products

Active Iq Unified Manager

E Series Santricity Os Controller

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.18.14

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp A700s Firmware	All versions

Running on/with	Platform Versions
Netapp A700s	All versions

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp E Series Santricity Os Controller	From 11.0 to 11.50.2
Netapp Hci Bootstrap Os	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff 8300 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff 8300	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas 8300 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas 8300	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff 8700 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff 8700	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas 8700 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas 8700	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A400 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A400	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas A400 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas A400	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A250 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A250	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas A250 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas A250	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas 500f Firmware	All versions

Running on/with	Platform Versions
Netapp Fas 500f	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff 500f Firmware	All versions

Running on/with	Platform Versions
Netapp Aff 500f	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610c Firmware	All versions

Running on/with	Platform Versions
Netapp H610c	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610s Firmware	All versions

Running on/with	Platform Versions
Netapp H610s	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H615c Firmware	All versions

Running on/with	Platform Versions
Netapp H615c	All versions

References (12)

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85daf0e725358be78dfd208dea5fd665d8cb901

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

https://github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb901

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20220901-0007/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2022/dsa-5207

Source: cve@mitre.org

Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85daf0e725358be78dfd208dea5fd665d8cb901