PT-2022-5929 · Linux+9 · Linux Kernel+9

Syzbot · Published 2022-09-22 · Updated 2025-05-07 · CVE-2022-43750

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.15 Linux kernel versions 6.x prior to 6.0.1

Description The issue is related to a buffer overflow in the drivers/usb/mon/mon bin.c file of the Linux kernel, which can be exploited by a user-space client to corrupt the monitor's internal memory. This could potentially allow an attacker to execute arbitrary code.

Recommendations For Linux kernel versions prior to 5.19.15, update to version 5.19.15 or later. For Linux kernel versions 6.x prior to 6.0.1, update to version 6.0.1 or later. As a temporary workaround, consider restricting access to the mon bin.c module until a patch is available.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2023:2148

ALSA-2023:2458

ALSA-2023:2736

ALSA-2023:2951

ALT-PU-2022-2809

ALT-PU-2022-2844

ALT-PU-2022-2849

ALT-PU-2022-2860

ALT-PU-2022-2864

ALT-PU-2022-2867

ALT-PU-2022-2875

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2022-2951

ALT-PU-2022-2965

ALT-PU-2022-2968

ALT-PU-2022-2970

ALT-PU-2022-2975

ALT-PU-2022-3061

ALT-PU-2023-1342

ALT-PU-2023-4894

AZL-11354

BDU:2022-07349

CESA-2023_2736

CESA-2023_2951

CVE-2022-43750

DLA-3173-1

DLA-3245-1

OESA-2022-2035

OESA-2022-2036

OESA-2022-2045

OPENSUSE-SU-2022_3897-1

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4053-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4617-1

RHSA-2023:1987

RHSA-2023:1988

RHSA-2023:2148

RHSA-2023:2458

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023_1987

RHSA-2023_1988

RHSA-2023_2148

RHSA-2023_2458

RHSA-2023_2736

RHSA-2023_2951

RHSA-2024:0412

SUSE-SU-2022:3897-1

SUSE-SU-2022:3929-1

SUSE-SU-2022:3930-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4053-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4272-1

SUSE-SU-2022:4273-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0416-1

USN-5758-1

USN-5791-1

USN-5791-2

USN-5791-3

USN-5792-1

USN-5792-2

USN-5793-1

USN-5793-2

USN-5793-3

USN-5793-4

USN-5815-1

USN-5854-1

USN-5861-1

USN-5862-1

USN-5865-1

USN-5877-1

USN-5883-1

USN-5913-1

USN-5919-1

USN-5924-1

USN-5975-1

USN-6007-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 835

• https://github.com/torvalds/linux/commit/a659daf63d16aa883be42f3f34ff84235c302198 · Patch
• https://ubuntu.com/security/notices/USN-5791-3 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2458.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5919-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39842 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3245-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0394 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2458.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42432 · Security Note
• https://ubuntu.com/security/notices/USN-5854-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5791-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5877-1 · Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.15 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20369 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4273-1 · Vendor Advisory