PT-2022-2362 · Linux+6 · Linux Kernel+6
Published
2022-04-03
·
Updated
2024-06-15
·
CVE-2022-28389
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.17.1
Description
The issue is related to a double free error in the
mcba usb start xmit function in the drivers/net/can/usb/mcba usb.c file of the Linux kernel. This error can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For Linux kernel versions through 5.17.1, consider updating to a version that includes a fix for the double free error in the
mcba usb start xmit function.
As a temporary workaround, consider restricting access to the mcba usb start xmit function in the drivers/net/can/usb/mcba usb.c file until a patch is available.Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu