What’s Vulnerable › Vulnerabilities

CVE-2022-3636: Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after free

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-21 · updated 2026-07-28
• Weakness: CWE-119

Description

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is 17a5f6a78dc7b8db385de346092d7d9f9dc24df6. It is best practice to apply a patch to resolve this issue. No released Linux Kernel version was ever affected by this CVE.

Affected products

• Debian Linux: 11.0
• Linux kernel: all versions

References

• https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=17a5f6a78dc7b8db385de346092d7d9f9dc24df6
• https://vuldb.com/cve/CVE-2022-3636
• https://vuldb.com/vuln/211935
• https://vuldb.com/vuln/211935/cti
• https://www.kernel.org/
• https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=17a5f6a78dc7b8db385de346092d7d9f9dc24df6
• https://vuldb.com/?id.211935
• https://www.debian.org/security/2023/dsa-5333

Get alerted when CVE-2022-3636 or the next vulnerability affects your stack