Lucene search
+L

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open() aka a race condition between cmm_open() and cm4000_detach().

🗓️ 09 Nov 2022 08:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 20 Views

Linux kernel up to 6.0.6 has a race and use-after-free in the memory card driver when a device is removed during open between cmm_open() and cm4000_detach().

Related
Detection
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2022-44032
30 Oct 202201:15
–attackerkb
bdu_fstec
BDU FSTEC
Linux PCMCIA Kernel Driver DoS
24 Aug 202300:00
–bdu_fstec
cbl_mariner
CBLMariner
CVE-2022-44032 affecting package kernel for versions less than 5.15.122.1-2
10 Aug 202316:37
–cbl_mariner
cbl_mariner
CBLMariner
CVE-2022-44032 affecting package kernel 5.10.185.1-1
15 Aug 202316:37
–cbl_mariner
circl
Circl
CVE-2022-44032
1 Nov 202205:05
–circl
cnnvd
CNNVD
Linux Kernel Race Condition Vulnerabilities
30 Oct 202200:00
–cnnvd
cnvd
CNVD
Linux kernel cm4000_cs.c competition condition vulnerability
31 Oct 202200:00
–cnvd
cve
CVE
CVE-2022-44032
30 Oct 202200:00
–cve
cvelist
Cvelist
CVE-2022-44032
30 Oct 202200:00
–cvelist
debiancve
Debian CVE
CVE-2022-44032
30 Oct 202200:00
–debiancve
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Nov 2022 08:00Current
7.2High risk
Vulners AI Score7.2
CVSS 3.16.4
EPSS0.00352
SSVC
20