CVE-2022-3541: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_address of the file drivers/net/ethernet/sunplus/spl2sw_driver.c of the component BPF. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211041 was assigned to this vulnerability.

Affected products

• Linux Linux Kernel: from 5.19, before 5.19.17 (fixed in 5.19.17); from 6.0, before 6.0.3 (fixed in 6.0.3)

Published 2022-10-17. Last modified 2026-06-17.