CVE-2022-28390

Опубликовано: 03 апр. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

Ссылки

https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/
https://security.netapp.com/advisory/ntap-20220513-0001/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5127
Third Party Advisory
https://www.debian.org/security/2022/dsa-5173
Third Party Advisory
https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/
https://security.netapp.com/advisory/ntap-20220513-0001/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5127
Third Party Advisory
https://www.debian.org/security/2022/dsa-5173
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.17.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:netapp:hci_baseboard_management_controller:h300e:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h500e:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h700e:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00012

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVE-2022-28390

CVSS3: 7.8

ubuntu

около 3 лет назад

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

CVE-2022-28390

CVSS3: 7

redhat

около 3 лет назад

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

CVE-2022-28390

CVSS3: 7.8

msrc

около 3 лет назад

Описание отсутствует

CVE-2022-28390

CVSS3: 7.8

debian

около 3 лет назад

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kerne ...

GHSA-hgf7-47f3-2gq3

CVSS3: 7.8

github

около 3 лет назад

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

EPSS

Процентиль: 1%

0.00012

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-415