Intel

CVE-2022-3594

ECS: Improper Resource Shutdown or Release (CVE-2022-3594)

mediumEPSS 2.5%

Affected

  • Dell/ECS 3.8.1.0..*

Description

A vulnerability was found in intr_callback in drivers/net/usb/r8152.c in the BPF component in the Linux Kernel. The manipulation leads to logging excessive data, where an attack can be launched remotely.

Source: BSI CSAFBSI WID Portalredhat_csafcvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

DellECS
3.8.1.0

Metrics

XIEM Effective CVSS
5.3
Source: cna-v3
EPSS percentile
84.1 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
KEV status
—
Show all metrics
Severity
medium
Priority score
84.69
Exploit maturity
no public PoC known
CVSS v3
5.3
EPSS score
2.5 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2022-10-18 00:00 UTC
CWE
CWE-404

Weakness classes (CWE)

  • CWE-404Class

    Improper Resource Shutdown or Release

    The product does not release or incorrectly releases a resource before it is made available for re-use.

    cwe.mitre.org →

References & sources