Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-45888

Опубликовано: 25 нояб. 2022
Источник: debian
EPSS Низкий

Описание

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed6.3.7-1package
linuxnot-affectedbullseyepackage
linuxnot-affectedbusterpackage

Примечания

  • https://lore.kernel.org/all/20221022175404.GA375335@ubuntu/

  • Negligible security impact, would need physical access to "exploit"

EPSS

Процентиль: 1%
0.00012
Низкий

Связанные уязвимости

CVSS3: 6.4
ubuntu
почти 3 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

CVSS3: 6.4
redhat
почти 3 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

CVSS3: 6.4
nvd
почти 3 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

CVSS3: 6.4
github
почти 3 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

CVSS3: 6.4
fstec
почти 3 года назад

Уязвимость компонента driver/char/xillybus/xilliusb.c ядра операционной системы Linux, позволяющая нарушителю повысить привилегии в системе.

EPSS

Процентиль: 1%
0.00012
Низкий