CVE-2022-45884

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

Score

CVSS 3.1 7.0 High

Status

Analyzed - cve@mitre.org

Published

2022-11-25

Last modified

2024-08-03

Weaknesses

CWE-362, CWE-416

Affected products

• Linux Kernel (Linux)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500s Firmware (Netapp)
• H700s Firmware (Netapp)

References

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=627bb528b086b4136315c25d6a447a98ea9448d3
• https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/
• https://lore.kernel.org/linux-media/20221115131822.6640-4-imv4bel%40gmail.com/
• https://security.netapp.com/advisory/ntap-20230113-0006/