Lucene search

K
osvGoogleOSV:ASB-A-196448784
HistoryDec 01, 2021 - 12:00 a.m.

Linux kernel vulnerability advisory

2021-12-0100:00:00
Google
osv.dev
22
linux kernel
vulnerability
advisory
max3421_set_address
memory corruption
escalation of privilege
physical access
usb access
no user interaction

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

38.5%

In max3421_set_address and related functions of max3421-hcd.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with physical/USB access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.