exploitDog

CVE-2022-45884

Опубликовано: 25 нояб. 2022

Источник: nvd

CVSS3: 7

EPSS Низкий

Описание

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

Ссылки

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=627bb528b086b4136315c25d6a447a98ea9448d3
Patch
https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/
Mailing List
Third Party Advisory
https://lore.kernel.org/linux-media/20221115131822.6640-4-imv4bel%40gmail.com/
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230113-0006/
Third Party Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=627bb528b086b4136315c25d6a447a98ea9448d3
Patch
https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/
Mailing List
Third Party Advisory
https://lore.kernel.org/linux-media/20221115131822.6640-4-imv4bel%40gmail.com/
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230113-0006/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.19.311 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.249 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.185 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.116 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.33 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.3.7 (исключая)

Конфигурация 2

Одновременно

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00338

Низкий

7 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVE-2022-45884

CVSS3: 7

ubuntu

почти 4 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

CVE-2022-45884

CVSS3: 6.4

redhat

почти 4 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

CVE-2022-45884

CVSS3: 7

msrc

почти 4 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free related to dvb_register_device dynamically allocating fops.

CVE-2022-45884

CVSS3: 7

debian

почти 4 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/med ...

GHSA-cm4c-3ppf-f88f

CVSS3: 7

github

почти 4 года назад

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

EPSS

Процентиль: 27%

0.00338

Низкий

7 High

CVSS3

Дефекты

CWE-362