Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-3303
HistorySep 27, 2022 - 11:15 p.m.

CVE-2022-3303

2022-09-2723:15:15
CWE-667
CWE-362
[email protected]
web.nvd.nist.gov
7
race condition
linux kernel
sound subsystem
system crash
denial of service

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

JSON

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Affected configurations

Nvd
Node
linuxlinux_kernelRange<6.0
OR
linuxlinux_kernelMatch6.0rc1
OR
linuxlinux_kernelMatch6.0rc2
OR
linuxlinux_kernelMatch6.0rc3
OR
linuxlinux_kernelMatch6.0rc4
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel6.0cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
linuxlinux_kernel6.0cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
linuxlinux_kernel6.0cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
linuxlinux_kernel6.0cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
debiandebian_linux11.0cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Related

prion 1
cve 1
nessus 53
cvelist 1
cbl_mariner 2
redhatcve 1
cnvd 1
debiancve 1
ubuntucve 1
openvas 40
oraclelinux 2
suse 6
osv 14
ubuntu 16
mageia 2
debian 2
photon 2
slackware 1
ics 1
prion
prion
Race condition
2022-09-27 23:15:00
cve
cve
CVE-2022-3303
2022-09-27 23:15:15
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2022-3303)
2023-03-28 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:3779-1)
2022-10-27 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:3599-1)
2022-10-18 00:00:00
cvelist
cvelist
CVE-2022-3303
2022-09-27 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-3303 affecting package kernel 5.10.145.1-1
2022-11-03 00:45:13
CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1
2022-10-17 22:54:53
redhatcve
redhatcve
CVE-2022-3303
2022-09-26 13:18:53
cnvd
cnvd
Linux kernel denial-of-service vulnerability (CNVD-2022-68087)
2022-09-29 00:00:00
debiancve
debiancve
CVE-2022-3303
2022-09-27 23:15:15
ubuntucve
ubuntucve
CVE-2022-3303
2022-09-27 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3779-1)
2022-10-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3599-1)
2022-10-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3688-1)
2022-10-24 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2023-02-14 00:00:00
Unbreakable Enterprise kernel security update
2023-02-13 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-10-22 00:00:00
Security update for the Linux Kernel (important)
2022-10-14 00:00:00
Security update for the Linux Kernel (important)
2022-11-02 00:00:00
osv
osv
linux-azure vulnerabilities
2023-01-09 20:51:27
linux-azure-5.4, linux-azure-fde vulnerabilities
2023-01-10 20:10:14
linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
2023-01-06 21:37:15
ubuntu
ubuntu
Linux kernel (Azure) vulnerabilities
2023-01-09 00:00:00
Linux kernel (Azure) vulnerabilities
2023-01-10 00:00:00
Linux kernel (BlueField) vulnerabilities
2023-01-19 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-10-23 23:35:49
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
debian
debian
[SECURITY] [DSA 5257-1] linux security update
2022-10-18 21:06:43
[SECURITY] [DLA 3173-1] linux-5.10 security update
2022-11-01 20:57:30
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0275
2022-11-04 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-11-29 21:04:28
ics
ics
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
2023-06-15 12:00:00

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2022-3303
prion1cve1nessus53cvelist1cbl_mariner2redhatcve1cnvd1debiancve1ubuntucve1openvas40oraclelinux2suse6osv14ubuntu16mageia2debian2photon2slackware1ics1