Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-48626
HistoryFeb 26, 2024 - 12:00 a.m.

CVE-2022-48626

2024-02-2600:00:00
ubuntu.com
ubuntu.com
3
cve-2022-48626
linux kernel
moxart
use-after-free
mmc host
device

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved: moxart:
fix potential use-after-free on remove path It was reported that the mmc
host structure could be accessed after it was freed in moxart_remove(), so
fix this by saving the base register of the device and using it instead of
the pointer dereference.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%