CVE-2022-3534: debian linux 11.0; +3 more affected products

Affected technology

debian linux · 11.0
debian

linux kernel · from 5.10 (inclusive), before 5.10.163 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.86 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.0.16 (exclusive)
linux

linux kernel · from 6.1 (inclusive), before 6.1.2 (exclusive)
linux

Kernel · 5.10.162, 5.15.0, 5.15.1, 5.15.2, 5.15.3, 5.15.4, 5.15.5, 5.15.6, 5.15.7, 5.15.8, 5.15.9, 5.15.10, 5.15.11, 5.15.12, 5.15.13, 5.15.14, 5.15.15, 5.15.16, 5.15.17, 5.15.18, 5.15.19, 5.15.20, 5.15.21, 5.15.22, 5.15.23, 5.15.24, 5.15.25, 5.15.26, 5.15.27, 5.15.28, 5.15.29, 5.15.30, 5.15.31, 5.15.32, 5.15.33, 5.15.34, 5.15.35, 5.15.36, 5.15.37, 5.15.38, 5.15.39, 5.15.40, 5.15.41, 5.15.42, 5.15.43, 5.15.44, 5.15.45, 5.15.46, 5.15.47, 5.15.48, 5.15.49, 5.15.50, 5.15.51, 5.15.52, 5.15.53, 5.15.54, 5.15.55, 5.15.56, 5.15.57, 5.15.58, 5.15.59, 5.15.60, 5.15.61, 5.15.62, 5.15.63, 5.15.64, 5.15.65, 5.15.66, 5.15.67, 5.15.68, 5.15.69, 5.15.70, 5.15.71, 5.15.72, 5.15.73, 5.15.74, 5.15.75, 5.15.76, 5.15.77, 5.15.78, 5.15.79, 5.15.80, 5.15.81, 5.15.82, 5.15.83, 5.15.84, 5.15.85, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.10, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.0.15, 6.1.0, 6.1.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1
Siemens

Description’s affected range: up to 5.10.162/5.15.85/6.0.15/6.1.1

Component: libbpf
Function: btf_dump_name_dups
File: tools/lib/bpf/btf_dump.c

Attack conditions (VulDB, CVSS 4.0): Adjacent network · Low privileges required · No user interaction required

What an attacker can do

A attacker with low privileges can trigger a use-after-free error. VulDB’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality, integrity and availability impact as low. The description does not state a further attacker outcome.