CVE-2022-3521

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.

• CWE-362

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec7eede369fe5b0d085ac51fdbb95184f87bfc6cMailing List, Patch
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
• https://vuldb.com/?id.211018Permissions Required, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec7eede369fe5b0d085ac51fdbb95184f87bfc6cMailing List, Patch
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
• https://vuldb.com/?id.211018Permissions Required, Third Party Advisory

Published

Oct 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35201Tenda-AC18 V15.03.05.05 was discovered to contain a remote c…9.8
• CVE-2022-35202A security issue in Sitevision version 10.3.1 and older allo…5.1
• CVE-2022-35203An access control issue in TrendNet TV-IP572PI v1.0 allows u…7.2
• CVE-2022-35204Vitejs Vite before v2.9.13 was discovered to allow attackers…4.3
• CVE-2022-35205An issue was discovered in Binutils readelf 2.38.50, reachab…5.5
• CVE-2022-35206Null pointer dereference vulnerability in Binutils readelf 2…5.5
• CVE-2022-35212osCommerce2 before v2.3.4.1 was discovered to contain a cros…6.1
• CVE-2022-35213Ecommerce-CodeIgniter-Bootstrap before commit 56465f was dis…6.1
• CVE-2022-35216OMICARD EDM’s mail image relay function has a path traversal…7.5
• CVE-2022-35217The NHI card’s web service component has a stack-based buffe…7.8
• CVE-2022-35218The NHI card’s web service component has a heap-based buffer…5.5
• CVE-2022-35219The NHI card’s web service component has a stack-based buffe…5.5