CVE-2022-45888 — Race Condition in Linux

CWE-362 — Race ConditionCWE-416 — Use After FreeCWE-366 — Race Condition within a Thread6 documents6 sources
Severity
6.4MEDIUMNVD
EPSS
0.0%
top 95.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Linux KernelDebian LinuxDebian Linux-6.1+2 more
Timeline
PublishedNov 25

Description

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.5 | Impact: 5.9

Affected Packages6 packages

▶Debianlinux/linux_kernel< 6.1.119-1+2
▶debiandebian/linux< linux 6.1.119-1 (bookworm)
▶debiandebian/linux-6.1< linux 6.1.119-1 (bookworm)

🔴Vulnerability Details

2
GHSA
GHSA-9qv2-q963-rpq5: An issue was discovered in the Linux kernel through 6↗2022-11-25
▶
OSV
CVE-2022-45888: An issue was discovered in the Linux kernel through 6↗2022-11-25
▶

📋Vendor Advisories

3
Microsoft
An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.↗2022-11-08
▶
Red Hat
kernel: use-after-free due to race condition in drivers/char/xillybus/xillyusb.c↗2022-10-22
▶
Debian
CVE-2022-45888: linux - An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus...↗2022
▶