CVE-2022-3636

Low

No strong exploitation signal.

CVSS base

5.5 MEDIUM

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS — probability of exploitation (30 days)

0.3%

28.0th percentile

CISA KEV

Not listed

Weakness / dates

CWE-416

Published 2022-10-21 · modified 2026-07-28

CVSS breakdown

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector	A	Adjacent
Attack Complexity	L	Low
Privileges Required	L	Low
User Interaction	N	None
Scope	U	Unchanged
Confidentiality	L	Low
Integrity	L	Low
Availability	L	Low

Timeline

2022-10-21 — Published (NVD)
2026-07-28 — Last modified (NVD)

Description

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is 17a5f6a78dc7b8db385de346092d7d9f9dc24df6. It is best practice to apply a patch to resolve this issue. No released Linux Kernel version was ever affected by this CVE.

Affected

debian linux

References

Official: NVD · CVE.org