Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0035 27.6 —
AFFECTED Product Versions Fixed Kernel n/a – —
TIMELINE Oct 19 Reserved by VulDB Oct 19 Published (CNA: VulDB) Oct 14 RESCORED — CVE-2022-3606 (Linux Kernel). CVSS 3.5 → 5.5 (NVD).
A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to apply a patch to fix this issue. The identifier VDB-211749 was assigned to this vulnerability.
| Date | Event | Detail |
|---|---|---|
| October 19, 2022 | Reserved | Reserved by VulDB |
| October 19, 2022 | Published | Published (CNA: VulDB) |
| October 14, 2026 | RESCORED | RESCORED — CVE-2022-3606 (Linux Kernel). CVSS 3.5 → 5.5 (NVD). |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| Linux | Kernel | — | n/a | — |
Authoritative record: CVE-2022-3606 at cve.org
Vendors: linux
Weaknesses: CWE-404
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-3606 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
