CVE-2022-45886
HIGHLinux Kernel 2.6.12-6.0.9 - Use-After-Free via dvb_net.c Race Condition
Title source: llmDescription
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.
References (4)
Core 4
Core References
Mailing List, Patch, Third Party Advisory
https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/
Patch, Third Party Advisory, URL Repurposed
https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel%40gmail.com/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230113-0006/
Scores
CVSS v3
7.0
EPSS
0.0002
EPSS Percentile
5.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-362
CWE-416
Status
published
Products (6)
linux/linux_kernel
2.6.12 - 4.19.285
netapp/h300s_firmware
netapp/h410c_firmware
netapp/h410s_firmware
netapp/h500s_firmware
netapp/h700s_firmware
Published
Nov 25, 2022
Tracked Since
Feb 18, 2026