CVE-2022-36879

kernel: xfrm_expand_policies() in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice

Published Jul 27, 2022 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3102-1 linux-5.10 new package
Debian DLA Debian DLA DLA-3131-1 linux security update
Debian DSA Debian DSA DSA-5207-1 linux security update
EUVD EUVD EUVD-2022-39579 An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
Ubuntu USN Ubuntu USN USN-5667-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5668-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5677-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5682-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-5683-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5703-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-5706-1 Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5727-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5727-2 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-5774-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-5913-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6001-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6013-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6014-1 Linux kernel vulnerabilities
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 14, 2026, 5:12 PM
Reserved
Jul 27, 2022, 12:00 AM
Status
Modified
Published
Jul 27, 2022, 4:15 AM
Modified
Oct 14, 2026, 6:17 PM
Severity
Moderate
Public date
Jun 2, 2022, 12:00 AM