Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-4382
HistoryJan 10, 2023 - 12:00 a.m.

CVE-2022-4382

2023-01-1000:00:00
ubuntu.com
ubuntu.com
18

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

20.7%

JSON

A use-after-free flaw caused by a race among the superblock operations in
the gadgetfs Linux driver was found. It could be triggered by yanking out a
device that is running the gadgetfs side.

Notes

Author Note
sbeattie Because the USB gadget interface is for when the system is acting as a USB device rather than a host, the USB Gadget FS is not mounted by default in Ubuntu.
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-146.163UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-69.76UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-38.39UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1099.107UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1033.37UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1022.23UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1033.37~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1099.107~18.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1105.111UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1035.42UNKNOWN
Rows per page:
1-10 of 591

References

Related

veracode 1
redhatcve 1
cve 1
prion 1
debiancve 1
osv 11
ubuntu 12
nessus 16
mageia 2
photon 1
slackware 1
veracode
veracode
Use-After-Free
2023-04-05 19:18:51
redhatcve
redhatcve
CVE-2022-4382
2023-03-30 09:20:59
cve
cve
CVE-2022-4382
2023-01-10 22:15:14
prion
prion
Design/Logic Flaw
2023-01-10 22:15:00
debiancve
debiancve
CVE-2022-4382
2023-01-10 22:15:14
osv
osv
linux-xilinx-zynqmp vulnerabilities
2023-06-08 22:16:29
linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4 vulnerabilities
2023-03-29 17:33:06
linux-bluefield vulnerabilities
2023-04-14 10:22:02
ubuntu
ubuntu
Linux kernel (Xilinx ZynqMP) vulnerabilities
2023-06-08 00:00:00
Linux kernel (BlueField) vulnerabilities
2023-04-14 00:00:00
Linux kernel vulnerabilities
2023-03-29 00:00:00
nessus
nessus
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-5985-1)
2023-03-29 00:00:00
Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-6020-1)
2023-04-14 00:00:00
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5980-1)
2023-03-28 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2023-03-11 22:00:39
Updated kernel-linus packages fix security vulnerabilities
2023-03-11 22:00:39
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0332
2023-02-14 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-02-18 02:15:39

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

20.7%

JSON
Related for UB:CVE-2022-4382
veracode1redhatcve1cve1prion1debiancve1osv11ubuntu12nessus16mageia2photon1slackware1