# CVEs published 2022-10-16

7 CVEs were published on October 16, 2022: 1 critical, 1 high. Days are UTC.

- [CVE-2022-3521](https://cve.now/CVE-2022-3521.md): Linux Kernel kcm kcmsock.c kcm\_tx\_work race condition (CVSS 2.6, Linux Kernel)
- [CVE-2022-3523](https://cve.now/CVE-2022-3523.md): Linux Kernel Driver memory.c use after free (CVSS 5.3, Linux Kernel)
- [CVE-2022-3524](https://cve.now/CVE-2022-3524.md): Linux Kernel IPv6 ipv6\_renew\_options memory leak (CVSS 4.3, Linux Kernel)
- [CVE-2022-3526](https://cve.now/CVE-2022-3526.md): Linux Kernel skb macvlan.c macvlan\_handle\_frame memory leak (CVSS 5.3, Linux Kernel)
- [CVE-2022-41323](https://cve.now/CVE-2022-41323.md): In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service at (CVSS 7.5, django)
- [CVE-2022-42968](https://cve.now/CVE-2022-42968.md): Gitea before 1.17.3 does not sanitize and escape refs in the git backend. (CVSS 9.8, github.com/go-gitea/gitea · code.gitea.io/gitea)
- [CVE-2022-42969](https://cve.now/CVE-2022-42969.md): The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subv (CVSS 5.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.