PT-2025-26105 · Linux +1 · Linux Kernel +1

🗓️ 15 Nov 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 19 Views

Use-after-free issue in Linux kernel's ath9k hif usb rx cb function needs urgent resolution.

Reporter	Title	Published	Views	Family All 18749
BDU FSTEC	The vulnerability in the function ath9k_htc_probe_device() of the drivers/net/wireless/ath/ath9k/htc_drv_init.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cp2112_xfer() function in the drivers/hid/hid-cp2112.c driver module of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the dwc3_gadget_ep_skip_trbs() function in the drivers/usb/dwc3/gadget.c module of the Linux device support driver allows a hacker to cause a service failure.	25 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `skb_unclone_keeptruesize()` function in the `net/core/skbuff.h` module, which supports kernel network functions in the Linux operating system, allows a attacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sk_psock_init() function in the net/core/skmsg.c module, which supports network functions of the Linux kernel, allows a attacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the blkcg_iolatency_throttle() function in the block/blk-iolatency.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the efx_ef10_try_update_nic_stats_vf() function in the drivers/net/ethernet/sfc/ef10.c file of the Solarflare Linux kernel driver module allows a malicious actor to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the create_log_context() function in the drivers/md/dm-log.c file of the support for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the __bpf_sk_lookup() function in the net/core/filter.c module exposes network functions of the Linux operating system, allowing a hacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nested_svm_vmexit() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel allows a attacker to cause a service failure.	26 Mar 202600:00	–	bdu_fstec

Source	Link
github	www.github.com/bb33bb/CVE-2022-2639-PipeVersion
github	www.github.com/0x0000000000-03/CVE-2022-2639-PipeVersion
github	www.github.com/avboy1337/CVE-2022-2639-PipeVersion
github	www.github.com/bluefrostsecurity/CVE-2023-2008
github	www.github.com/Pwnzer0tt1/CVE-2022-36946
github	www.github.com/aels/CVE-2022-2586-LPE
github	www.github.com/sniper404ghostxploit/CVE-2022-2586
web	www.web.archive.org/web/20250000000000*/https:/github.com/nidhi7598/linux-4.19.72_CVE-2022-29581
web	www.web.archive.org/web/20250000000000*/https:/github.com/veritas501/CVE-2022-2639-PipeVersion
bdu	www.bdu.fstec.ru/vul/2022-02672

28 Jul 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8 - 8.8

CVSS 35.1

EPSS0.10458

SSVC

linux kernel vulnerability use-after-free ath9k hif usb rx cb function fix recommendations