Lucene search

MitreCVE-2022-43750

HistoryOct 26, 2022 - 4:15 a.m.

CVE-2022-43750

2022-10-2604:15:13

CWE-787

mitre

web.nvd.nist.gov

208

cve-2022-43750

linux kernel

usbmon

memory corruption

nvd

security

vulnerability

5.19.15

6.0.1

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

14.2%

JSON

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor’s internal memory.

Affected configurations

Nvd

Node

linuxlinux_kernelRange2.6.21–4.9.331

linuxlinux_kernelRange4.10–4.14.296

linuxlinux_kernelRange4.15–4.19.262

linuxlinux_kernelRange4.20–5.4.218

linuxlinux_kernelRange5.5–5.10.148

linuxlinux_kernelRange5.11–5.15.73

linuxlinux_kernelRange5.16–5.19.15

linuxlinux_kernelRange6.0–6.0.1

Node

debiandebian_linuxMatch10.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*