Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-74084
HistoryOct 31, 2022 - 12:00 a.m.

Linux kernel contention condition vulnerability (CNVD-2022-74084)

2022-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
46

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Linux kernel is the kernel used by the Linux Foundation’s open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/scr24x_cs.c when calling open() if scr24x_ open() and scr24x_remove(), an attacker can exploit the vulnerability to cause post-release reuse.

CPENameOperatorVersion
linux linux kernelle6.0.6

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H