CVE Feed

    Dashboard / CVE / CVE-2022-3566

    CVE-2022-3566

    A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult. The vulnerability was introduced in 2.6.12, commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ("Linux-2.6.12-rc2"). Upgrading to version 4.19.317, 5.4.279, 5.10.221, 5.15.162 and 6.1 will fix this issue. The name of the patch is fcd31dd8291b23d713245947ec2b2d99ef07aef2/3b32f265805a49071e2c4568a524398ba22bf93c/d529193eae979a7bf2255cd9fe68b7af7a1c91b3/5bb642cc3355ffd3c8bca0a8bd8e6e65bcc2091c/f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57. The affected component should be upgraded.

    Published:Oct 6, 2022
    Last Modified:Aug 26, 2026
    EPS:Oct 17, 2022
    EPSS Score:0.00449
    CVSS Score:4.6

    Affected Products

    Vendor
    Linux
    Product
    Kernel
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhev Hypervisor

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-80719 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after …
    CVE-2026-74639 — In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs o…
    CVE-2026-68455 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before …
    CVE-2026-72049 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump …
    CVE-2026-68090 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurr…
    CVE-2026-64082 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from unini…
    CVE-2026-46243 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…
    CVE-2026-46300 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker …
    CVE-2026-43266 (CVSS 5.5) — In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor…
    CVE-2026-31656 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount underflow in in…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High