CVE-2022-45885 — Race Condition in Kernel

CWE-362 — Race ConditionCWE-416 — Use After FreeCWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition6 documents6 sources
Severity
7.0HIGHNVD
EPSS
0.0%
top 95.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Linux KernelDebian LinuxMsrc Cbl2 Kernel 5.15.182.1-1 ON CBL Mariner 2.0+1 more
Timeline
PublishedNov 25

Description

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/linux

🔴Vulnerability Details

2
OSV
CVE-2022-45885: An issue was discovered in the Linux kernel through 6↗2022-11-25
▶
GHSA
GHSA-3vq4-4gh9-jrxq: An issue was discovered in the Linux kernel through 6↗2022-11-25
▶

📋Vendor Advisories

3
Red Hat
kernel: use-after-free due to race condition occurring in dvb_frontend.c↗2022-11-15
▶
Microsoft
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.↗2022-11-08
▶
Debian
CVE-2022-45885: linux - An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-cor...↗2022
▶