4.2
CVSSv3

CVE-2022-41849

Published: 30/09/2022 Updated: 25/03/2024
CVSS v3 Base Score: 4.2 | Impact Score: 3.6 | Exploitability Score: 0.5
VMScore: 0

Vulnerability Summary

drivers/video/fbdev/smscufx.c in the Linux kernel up to and including 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_disconnect.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

debian debian linux 10.0

Vendor Advisories

Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
In v4l2_m2m_querybuf of v4l2-mem2memc, there is a possible out of bounds write due to improper input validation This could lead to local escalation of privilege with System execution privileges needed User interaction is not needed for exploitationProduct: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel (CVE-20 ...
A memory overflow vulnerability was found in the Linux kernel's ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores This flaw allows a local user to starve the resources, causing a denial of service The highest threat from this vulnerability is to system availability (CVE-2021 ...
A memory overflow vulnerability was found in the Linux kernel's ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores This flaw allows a local user to starve the resources, causing a denial of service The highest threat from this vulnerability is to system availability (CVE-2021 ...
use-after-free in ufx_ops_open() due to race condition with ufx_usb_disconnect() when disconnecting a usb device while calling open() on the device ...