CVE-2022-3435: Debian Linux

Medium severity, CVSS 4.3. EPSS: 5.1% chance of exploitation in the next 30 days.

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Linux Linux Kernel: affected versions not specified

Published 2022-10-08. Last modified 2026-06-17.