CVE-2022-3623

highpriority · track · 30EPSS 0.011 · 65 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.09% (65th) EPSS

CVSS 7.5 · high

Is it mine?

49 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-23

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211921 was assigned to this vulnerability.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
FixedSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.6 · impact 5.9

v3.15mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · CISA US

v3.17.5highAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.15mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · ENISA EU

v3.15mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · cna@vuldb.comexploitability 1.6 · impact 3.4

v3.15mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-123USCWE-362USCWE-362USCWE-362USCWE-362US

affected products (49)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)all versionscisa_csaf_otUS
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)all versionscisa_csaf_otUS
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)all versionscisa_csaf_otUS
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)all versionscisa_csaf_otUS
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)all versionscisa_csaf_otUS
Siemens SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)< V2.3cisa_csaf_otUS
Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)< V2.3cisa_csaf_otUS
Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)< V2.3cisa_csaf_otUS
Siemens SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)< V2.3cisa_csaf_otUS
Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)< V2.3cisa_csaf_otUS
Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)< V2.3cisa_csaf_otUS
Linux Kernel≤ n/aenisa_euvdEU

showing 20 of 49

advisories (6)

Vendor and ecosystem advisories describing this.

NCSC-2024-0246Kwetsbaarheden verholpen in Siemens productenNL2024-06-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten, zoals SCALANCE, SICAM, Tecnomatix, SITOP en PowerSys.
SSA-625862SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.32024-06-11csaf · siemens_psirtDE
SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 are affected by multiple vulnerabilities in third-party components and the integrated web server. Siemens has released new versions for the affected products and recommends to update to the latest versions.
WID-SEC-W-2022-1812Linux Kernel: Mehrere SchwachstellenDeutsch2022-10-20csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial of Service Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.
WID-SEC-W-2023-2112IBM Spectrum Protect: Mehrere SchwachstellenDeutsch2023-08-22csaf · cert_bundDE
Ein lokaler oder entfernter Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Zustand herbeizuführen oder unbekannte Auswirkungen zu verursachen.
WID-SEC-W-2024-0064Juniper Produkte: Mehrere SchwachstellenDeutsch2024-01-10csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.
ICSA-24-165-10Siemens SIMATIC and SIPLUS2024-06-11icsa · cisa_csaf_otUS
SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3 are affected by multiple vulnerabilities in third-party components and the integrated web server. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2022-10-20modified 2026-06-17

references (32)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan