CVE-2022-3545: Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free

Published Oct 17, 2022
·
Updated

A use-after-free in the function areacacheget of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c of the component IPsec in Linux Kernel could allow a remote authenticated attacker from within the local network to cause an unknown impact.

Other sources

A vulnerability has been found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in IPsec in the Linux Kernel. The manipulation leads to a use after free problem.

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee6770294166c30d437bf86a

Red Hat

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function areacacheget of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

Affected Software

31 affected componentsFixes available
redhat/kernel<6.0
6.0
IBM Security Verify Governance, Identity Manager software component<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager virtual appliance component<=ISVG 10.0.2
Linux Linux kernel>=4.11<4.14.303
Linux Linux kernel>=4.15<4.19.270
Linux Linux kernel>=4.20<5.4.228
Linux Linux kernel>=5.5<5.10.160
Linux Linux kernel>=5.11<5.15.84
All of the following
NetApp H410c Firmware
NetApp H410c
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
Debian Debian Linux=10.0
Debian Debian Linux=11.0
NetApp H410c Firmware
NetApp H410c
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H410s Firmware
NetApp H410s
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1

Event History

Oct 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Jan 16, 2023
Data Sourced
via Red Hat·03:14 PM
DescriptionSeverityAffected Software
Jul 18, 2023
Data Sourced
10:20 AM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·04:47 AM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-3545?

CVE-2022-3545 is classified as a vulnerability that could allow a remote authenticated attacker to cause unknown impacts.

2

How do I fix CVE-2022-3545?

To mitigate CVE-2022-3545, you should upgrade to kernel version 6.0 or later for Red Hat and 5.10.223-1 or later for Debian.

3

Which software is affected by CVE-2022-3545?

CVE-2022-3545 affects various versions of the Linux kernel, Debian Linux, and IBM Security Verify Governance components.

4

Can CVE-2022-3545 be exploited remotely?

Yes, CVE-2022-3545 can potentially be exploited by a remote authenticated attacker from within the same local network.

5

What component of the Linux Kernel does CVE-2022-3545 affect?

CVE-2022-3545 affects the IPsec component of the Linux Kernel, specifically in the function area_cache_get.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203