PT-2022-4829 · Linux+7 · Linux Kernel+7

Published 2022-02-22 · Updated 2023-08-14 · CVE-2022-3239

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel video4linux driver (affected versions not specified)

Description A flaw use after free in the Linux kernel video4linux driver was found in the way a user triggers the em28xx usb probe() function for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:2736

ALSA-2023:2951

ALT-PU-2022-1656

ALT-PU-2022-1657

ALT-PU-2022-1678

ALT-PU-2022-1679

ALT-PU-2022-1680

ALT-PU-2022-1688

ALT-PU-2022-1713

ALT-PU-2022-1730

ALT-PU-2022-1746

ALT-PU-2022-1833

ALT-PU-2022-1880

ALT-PU-2022-1881

ALT-PU-2022-1907

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2022-2344

ALT-PU-2023-4894

BDU:2022-05855

CESA-2023_2736

CESA-2023_2951

CVE-2022-3239

OESA-2022-1966

OESA-2022-1967

OESA-2022-1984

OPENSUSE-SU-2022_3585-1

OPENSUSE-SU-2022_3609-1

OPENSUSE-SU-2022_3693-1

OPENSUSE-SU-2022_3775-1

OPENSUSE-SU-2022_3844-1

OPENSUSE-SU-2022_4617-1

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7933

RHSA-2022_8267

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023_2736

RHSA-2023_2951

RHSA-2024:0930

SUSE-SU-2022:3584-1

SUSE-SU-2022:3585-1

SUSE-SU-2022:3586-1

SUSE-SU-2022:3587-1

SUSE-SU-2022:3599-1

SUSE-SU-2022:3609-1

SUSE-SU-2022:3688-1

SUSE-SU-2022:3693-1

SUSE-SU-2022:3704-1

SUSE-SU-2022:3775-1

SUSE-SU-2022:3779-1

SUSE-SU-2022:3809-1

SUSE-SU-2022:3810-1

SUSE-SU-2022:3844-1

SUSE-SU-2022:4617-1

USN-5757-1

USN-5757-2

USN-5758-1

USN-5774-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 688

• https://osv.dev/vulnerability/SUSE-SU-2022:3704-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2153 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3810-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20422 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1966 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3566 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3585-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3779-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3564 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3586-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4617-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3524 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3584-1 · Vendor Advisory