CVE-2022-3586
A flaw was found in the Linux kernel’s networking code.
Published Oct 19, 2022 · updated Oct 14, 2026 · linux linux kernel
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 19, 2022 · NIST NVD
Detected
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.
Affected
- cpe debian/debian linux10.0
- cpe linux/linux kernelversion unspecified
- cpe linux/linux kernel6.0
Sources
- CVE.orgVulnerability recordCVE-2022-3586
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-3586
30-day exploitation probability 0.5%
first.org - NIST NVDVulnerability recordCVE-2022-3586
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to cra
nvd.nist.gov