01 Record

CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

MediumPUBLISHEDCNA: mitre

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.31% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 24.6% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-10-14.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2022-07-27 03:27Z4 YR AGO
Last updated: 2026-10-14 17:12Z15 DAYS AGO
Reserved: 2022-07-27
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Medium (CVSS 5.5)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: b8135026939a012ba1d8f2738461c2f682d67ffa4d007ea6f567d185da957a07

05 Affected products

VendorProductVersionsPlatforms

debiandebian_linuxNot specified—

linuxlinux_kernelNot specified—

netappa700sNot specified—

netappa700s_firmwareNot specified—

netappactive_iq_unified_managerNot specified—

netappaff_500fNot specified—

netappaff_500f_firmwareNot specified—

netappaff_8300Not specified—

netappaff_8300_firmwareNot specified—

netappaff_8700Not specified—

netappaff_8700_firmwareNot specified—

netappaff_a250Not specified—

netappaff_a250_firmwareNot specified—

netappaff_a400Not specified—

netappaff_a400_firmwareNot specified—

netappe-series_santricity_os_controllerNot specified—

netappfas_500fNot specified—

netappfas_500f_firmwareNot specified—

netappfas_8300Not specified—

netappfas_8300_firmwareNot specified—

netappfas_8700Not specified—

netappfas_8700_firmwareNot specified—

netappfas_a250Not specified—

netappfas_a250_firmwareNot specified—

netappfas_a400Not specified—

netappfas_a400_firmwareNot specified—

netapph300sNot specified—

netapph300s_firmwareNot specified—

netapph410cNot specified—

netapph410c_firmwareNot specified—

netapph410sNot specified—

netapph410s_firmwareNot specified—

netapph500sNot specified—

netapph500s_firmwareNot specified—

netapph610cNot specified—

netapph610c_firmwareNot specified—

netapph610sNot specified—

netapph610s_firmwareNot specified—

netapph615cNot specified—

netapph615c_firmwareNot specified—

netapph700sNot specified—

netapph700s_firmwareNot specified—

netapphci_bootstrap_osNot specified—

redhatenterprise_linuxNot specified—

redhatrhel_eusNot specified—

redhatrhev_hypervisorNot specified—

06 References

git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85daf0e725358be78dfd208dea5fd665d8cb901x_refsource_MISC
github.comhttps://github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb901x_refsource_MISC
www.debian.orgDSA-5207https://www.debian.org/security/2022/dsa-5207vendor-advisoryx_refsource_DEBIAN
security.netapp.comhttps://security.netapp.com/advisory/ntap-20220901-0007/x_refsource_CONFIRM
lists.debian.org[debian-lts-announce] 20220911 [SECURITY] [DLA 3102-1] linux-5.10 new packagehttps://lists.debian.org/debian-lts-announce/2022/09/msg00011.htmlmailing-listx_refsource_MLIST
lists.debian.org[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security updatehttps://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlmailing-listx_refsource_MLIST
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-419740.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-794697.html

07 Fixed in

Debian 12

linux
Fixed in 5.18.16-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 5.18.16-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 5.18.16-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.