CVE-2022-3526

A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.

• CWE-404
• CWE-401

• https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=e16b859872b87650bb55b12cca5a5fcdc49c1442Mailing List, Patch, Vendor Advisory
• https://vuldb.com/?id.211024Permissions Required, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=e16b859872b87650bb55b12cca5a5fcdc49c1442Mailing List, Patch, Vendor Advisory
• https://vuldb.com/?id.211024Permissions Required, Third Party Advisory

Published

Oct 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35254An unauthenticated attacker can cause a denial-of-service to…7.5
• CVE-2022-35255A weak randomness in WebCrypto keygen vulnerability exists i…9.1
• CVE-2022-35256The llhttp parser in the http module in Node v18.7.0 does no…6.5
• CVE-2022-35257A local privilege escalation vulnerability in UI Desktop for…7.8
• CVE-2022-35258An unauthenticated attacker can cause a denial-of-service to…7.5
• CVE-2022-35259XML Injection with Endpoint Manager 2022. 3 and below causin…7.8
• CVE-2022-35260curl can be told to parse a `.netrc` file for credentials. I…6.5
• CVE-2022-35261A denial of service vulnerability exists in the web_server h…7.5
• CVE-2022-35262A denial of service vulnerability exists in the web_server h…7.5
• CVE-2022-35263A denial of service vulnerability exists in the web_server h…7.5
• CVE-2022-35264A denial of service vulnerability exists in the web_server h…7.5
• CVE-2022-35265A denial of service vulnerability exists in the web_server h…7.5