Related Vulnerabilities: CVE-2022-33981  

drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.

Description

The MITRE CVE dictionary describes this issue as:

drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.

Additional Information

  • Bugzilla 2099504: CVE-2022-33981 kernel: use-after-free in floppy driver may lead to a DoS
  • CWE-416: Use After Free
  • FAQ: Frequently asked questions about CVE-2022-33981