CVE-2022-4662

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/
https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:6.0:rc1::::::
	cpe:2.3:o:linux:linux_kernel:6.0:rc2::::::
	cpe:2.3:o:linux:linux_kernel:6.0:rc3::::::

History

07 Nov 2023, 03:58

Type	Values Removed	Values Added
References	{'url': 'https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA@mail.gmail.com/', 'name': 'https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA@mail.gmail.com/', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'} {'url': 'https://lore.kernel.org/all/20220913140355.910732567@linuxfoundation.org/', 'name': 'https://lore.kernel.org/all/20220913140355.910732567@linuxfoundation.org/', 'tags': ['Exploit', 'Vendor Advisory'], 'refsource': 'MISC'}	() https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/ - () https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/ -

Information

Published : 2022-12-22 22:15

Updated : 2024-02-28 19:51

NVD link : CVE-2022-4662

Mitre link : CVE-2022-4662

CVE.ORG link : CVE-2022-4662

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-455

Non-exit on Failed Initialization

5.5 /10