CVE-2022-3239

HIGH

Linux Kernel 3.15-4.14.295 - Use-After-Free in Empia 28xx Video4Linux Driver

Title source: llm
STIX 2.1

Description

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 15.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (1)
linux/linux_kernel 3.15 - 4.14.295
Published Sep 19, 2022
Tracked Since Feb 18, 2026