CVE-2022-3625: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211929 was assigned to this vulnerability.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 4.19, before 5.4.211 (fixed in 5.4.211); from 5.5, before 5.10.138 (fixed in 5.10.138); from 5.11, before 5.15.63 (fixed in 5.15.63); from 5.16, before 5.19.4 (fixed in 5.19.4)

Published 2022-10-21. Last modified 2026-06-17.