Description
drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.
References (6)
Core 6
Core References
Release Notes, Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.15
Release Notes, Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.1
Patch, Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a659daf63d16aa883be42f3f34ff84235c302198
Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/a659daf63d16aa883be42f3f34ff84235c302198
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
Scores
CVSS v3
6.7
EPSS
0.0008
EPSS Percentile
23.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-787
Status
published
Products (2)
debian/debian_linux
10.0
linux/linux_kernel
2.6.21 - 4.9.331
Published
Oct 26, 2022
Tracked Since
Feb 18, 2026