CVE-2022-3621

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/inode.c of the component nilfs2. The manipulation leads to null pointer dereference. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211920.

• CWE-404
• CWE-476

• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=21a87d88c2253350e115029f14fe2a10a7e6c856Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
• https://vuldb.com/?id.211920Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=21a87d88c2253350e115029f14fe2a10a7e6c856Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
• https://vuldb.com/?id.211920Third Party Advisory

Published

Oct 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36198Multiple SQL injections detected in Bus Pass Management Syst…9.8
• CVE-2022-3620A vulnerability was found in Exim and classified as problema…9.8
• CVE-2022-36200In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin…7.5
• CVE-2022-36201Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi…9.8
• CVE-2022-36202Doctor's Appointment System1.0 is vulnerable to Incorrect Ac…9.8
• CVE-2022-36203Doctor's Appointment System 1.0 is vulnerable to Cross Site …6.1
• CVE-2022-36215DedeBIZ v6 was discovered to contain a remote code execution…7.2
• CVE-2022-36216DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote…7.2
• CVE-2022-3622The Blog2Social plugin for WordPress is vulnerable to autho…4.1
• CVE-2022-36220Kiosk breakout (without quit password) in Safe Exam Browser …9.8
• CVE-2022-36221Nokia Fastmile 3tg00118abad52 is affected by an authenticate…6.5
• CVE-2022-36222Nokia Fastmile 3tg00118abad52 devices shipped by Optus are s…8.4