CVE-2022-45885

2022-11-2500:00:00

ubuntu.com

linux kernel

dvb_frontend.c

race condition

use-after-free

device disconnection

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

An issue was discovered in the Linux kernel through 6.0.9.
drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a
use-after-free when a device is disconnected.

Bugs

Notes

Author	Note
sbeattie	unfixed upstream as of 2023.09.01 exploiting this vulnerability requires disconnecting a DVB device, which is why this has been prioritized as low. SUSE bug report claims 4172385b0c9a (“media: dvb-core: Fix use-after-free due on race condition at dvb_net”) is applied for this and reverted, but actually 6769a0b7ee0c (“media: dvb-core: Fix use-after-free on race condition at dvb_frontend”) is meant and was reverted in ec21a38df77a.

Author

Note

sbeattie

unfixed upstream as of 2023.09.01 exploiting this vulnerability requires disconnecting a DVB device, which is why this has been prioritized as low. SUSE bug report claims 4172385b0c9a (“media: dvb-core: Fix use-after-free due on race condition at dvb_net”) is applied for this and reverted, but actually 6769a0b7ee0c (“media: dvb-core: Fix use-after-free on race condition at dvb_frontend”) is meant and was reverted in ec21a38df77a.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux< anyUNKNOWN
ubuntu22.04noarchlinux< anyUNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu14.04noarchlinux< anyUNKNOWN
ubuntu16.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux-aws< anyUNKNOWN
ubuntu22.04noarchlinux-aws< anyUNKNOWN
ubuntu24.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws-5.15< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux	< any	UNKNOWN
ubuntu	22.04	noarch	linux	< any	UNKNOWN
ubuntu	24.04	noarch	linux	< any	UNKNOWN
ubuntu	14.04	noarch	linux	< any	UNKNOWN
ubuntu	16.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< any	UNKNOWN