CVE-2022-45886

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.

Score

CVSS 3.1 7.0 High

Status

Modified - cve@mitre.org

Published

2022-11-25

Last modified

2024-08-03

Weaknesses

CWE-362, CWE-416

Affected products

• Linux Kernel (Linux)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500s Firmware (Netapp)
• H700s Firmware (Netapp)

References

• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4172385b0c9ac366dcab78eda48c26814b87ed1a
• https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel%40gmail.com/
• https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel%40gmail.com/
• https://security.netapp.com/advisory/ntap-20230113-0006/