CVE-2022-3629

A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability.

• CWE-401
• CWE-401

• https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=7e97cfed9929eaabc41829c395eb0d1350fccb9dMailing List, Patch, Vendor Advisory
• https://vuldb.com/?ctiid.211930Third Party Advisory
• https://vuldb.com/?id.211930Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=7e97cfed9929eaabc41829c395eb0d1350fccb9dMailing List, Patch, Vendor Advisory
• https://vuldb.com/?ctiid.211930Third Party Advisory
• https://vuldb.com/?id.211930Third Party Advisory

Published

Oct 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36284Authenticated IDOR vulnerability in StoreApps Affiliate For …6.5
• CVE-2022-36285Authenticated Arbitrary File Upload vulnerability in dmitryl…7.2
• CVE-2022-36286Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-36287Uncaught exception in the FCS Server software maintained by …4.3
• CVE-2022-36288Multiple Cross-Site Request Forgery (CSRF) vulnerabilities i…8.8
• CVE-2022-36289Protection mechanism failure in the Intel(R) Media SDK softw…5.5
• CVE-2022-36290Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-36291Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-36292Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill…8.8
• CVE-2022-36293Buffer overflow vulnerability in Nintendo Wi-Fi Network Adap…7.2
• CVE-2022-36294Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-36296Broken Authentication vulnerability in JumpDEMAND Inc. Activ…5.3