CVE-2022-3566

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult. The vulnerability was introduced in 2.6.12, commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ("Linux-2.6.12-rc2"). Upgrading to version 4.19.317, 5.4.279, 5.10.221, 5.15.162 and 6.1 will fix this issue. The name of the patch is fcd31dd8291b23d713245947ec2b2d99ef07aef2/3b32f265805a49071e2c4568a524398ba22bf93c/d529193eae979a7bf2255cd9fe68b7af7a1c91b3/5bb642cc3355ffd3c8bca0a8bd8e6e65bcc2091c/f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57. The affected component should be upgraded.

• CWE-362

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57Patch, Third Party Advisory, Vendor Advisory
• https://vuldb.com/cve/CVE-2022-3566
• https://vuldb.com/vuln/211089
• https://vuldb.com/vuln/211089/cti
• https://www.kernel.org/
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57Patch, Third Party Advisory, Vendor Advisory
• https://vuldb.com/?id.211089Third Party Advisory

Published

Oct 17, 2022

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35651A stored XSS and blind SSRF vulnerability was found in Moodl…6.1
• CVE-2022-35652An open redirect issue was found in Moodle due to improper s…6.1
• CVE-2022-35653A reflected XSS issue was identified in the LTI module of Mo…6.1
• CVE-2022-35654Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issu…6.1
• CVE-2022-35655Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue …6.1
• CVE-2022-35656Pega Platform from 8.3 to 8.7.3 vulnerability may allow auth…4.5
• CVE-2022-35664Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-35665Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20…7.8
• CVE-2022-35666Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20…7.8
• CVE-2022-35667Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20…7.8
• CVE-2022-35668Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20…5.5
• CVE-2022-35669Acrobat Reader versions 22.001.20142 (and earlier), 20.005.3…5.5