PT-2022-4886 · Linux+8 · Linux Kernel+8
Hyunwoo Kim
·
Published
2022-09-08
·
Updated
2025-12-08
·
CVE-2022-41218
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.19.10
Description
The issue is related to the use of memory after it has been freed in the Linux kernel's dvb-core module, specifically affecting the
dvb demux open() and dvb dmxdev release() functions. This is caused by refcount races when handling the dvbdev->users and dvr dvbdev->users parameters. Exploitation of this issue could allow an attacker to cause a denial of service.Recommendations
For Linux kernel versions through 5.19.10, update to a version that includes the fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting access to the vulnerable
dvb demux open() and dvb dmxdev release() functions until a patch is available.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu