CVE-2022-4662

2022-12-2200:00:00

ubuntu.com

linux kernel

usb core

access control

flaw

local user

system crash

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

A flaw incorrect access control in the Linux kernel USB core subsystem was
found in the way user attaches usb device. A local user could use this flaw
to crash the system.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-201.212UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-136.153UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-57.63UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-28.29UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-239.273UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1147.159UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1093.101UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1027.31UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1016.17UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1117.123UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-201.212	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-136.153	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-57.63	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-28.29	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-239.273	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1147.159	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1093.101	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1027.31	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1016.17	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1117.123	UNKNOWN