PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2022-3435

CVE-2022-3435

kernel: out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 8, 2022

Updated · August 7, 2026

Description

An out-of-bounds memory read flaw was found in the Linux kernel. The IPv4 Handler component may delete IPv4 routes containing a multipath spec while the fib_info is using a nexthop object. This issue allows a local attacker access to unauthorized data.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No known mitigation available.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-125 · Out-of-bounds Read