CVE-2022-3545: Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-17 · updated 2026-10-14
Weakness: CWE-119

Description

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

Affected products

Debian Linux: 10.0, 11.0
Linux kernel: from 4.11 before 4.14.303; from 4.15 before 4.19.270; from 4.20 before 5.4.228; from 5.5 before 5.10.160; from 5.11 before 5.15.84 — fixed in 4.14.303, 4.19.270, 5.10.160, 5.15.84, 5.4.228
NetApp H300S Firmware: all versions
NetApp H410C Firmware: all versions
NetApp H410S Firmware: all versions
NetApp H500S Firmware: all versions
NetApp H700S Firmware: all versions

How to fix

Upgrade to a fixed version: Linux kernel 4.14.303, 4.19.270, 5.10.160, 5.15.84. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-3545 or the next vulnerability affects your stack