CVE-2022-0646

A use-after-free flaw was found in the Linux kernel’s Management Component Transport Protocol MCTP subsystem in the way a user triggers cancelworksync after the unregisternetdev during the removal of the device. This flaw allows a local user to crash or escalate their privileges on the system...

PT-2022-7429 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mctp route input function in the Linux kernel's implementation of the Management Component Transport Protocol MCTP. It involves the reuse of previously free...

PT-2022-7357 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.17-rc1 through 5.17-rc5 Description: A flaw in the Linux kernel Management Component Transport Protocol MCTP subsystem was found, related to use after free. This issue can be triggered by a local user, allowing them to...