Vulnerability Details : CVE-2022-41218
Potential exploit
In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.
Vulnerability category: Memory Corruption
Products affected by CVE-2022-41218
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-41218
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-41218
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2022-41218
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-41218
-
https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
[SECURITY] [DLA 3403-1] linux security update
-
https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html
[SECURITY] [DLA 3349-1] linux-5.10 security update
-
http://www.openwall.com/lists/oss-security/2022/09/24/2
oss-security - Re: [Report v2] CVE-2022-41218: Linux dvb-core: UAF in dvb-core/dmxdevMailing List;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2022/09/24/1
oss-security - [Report v2] CVE-2022-41218: Linux dvb-core: UAF in dvb-core/dmxdevExploit;Mailing List;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2022/09/23/4
oss-security - CVE-2022-41218: Linux dvb-core: UAF in dvb-core/dmxdevExploit;Mailing List;Third Party Advisory
-
https://lore.kernel.org/all/20220908132754.30532-1-tiwai%40suse.de/
[PATCH] media: dvb-core: Fix UAF due to refcount races at releasing - Takashi Iwai
-
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fd3d91ab1c6ab0628fe642dd570b56302c30a792
media: dvb-core: Fix UAF due to refcount races at releasing - kernel/git/torvalds/linux.git - Linux kernel source tree
-
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/dvb-core/dmxdev.c
kernel/git/torvalds/linux.git - Linux kernel source treeVendor Advisory
-
https://lore.kernel.org/all/20220908132754.30532-1-tiwai@suse.de/
[PATCH] media: dvb-core: Fix UAF due to refcount races at releasing - Takashi IwaiPatch;Vendor Advisory
-
https://www.debian.org/security/2023/dsa-5324
Debian -- Security Information -- DSA-5324-1 linuxThird Party Advisory
Jump to