IM
IronMonkey Threat Research

CVE-2022-3628 MEDIUM

Published: 2023-01-12 | Last Modified: 2025-04-08 | Status: Modified

Description

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.

Additional Descriptions (1)

Se encontró una falla de desbordamiento del búfer en el controlador Wi-Fi Broadcom Full MAC del kernel de Linux. Este problema ocurre cuando un usuario se conecta a un dispositivo USB malicioso. Esto puede permitir que un usuario local bloquee el sistema o aumente sus privilegios.

CVSS Metrics

Base Score: 6.6 (MEDIUM)

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorPHYSICAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 0.7

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-119
[email protected] Primary
en CWE-120

Affected Products

Vendor Product Version Update Type
linux linux_kernel 6.1 <built-in method update of dict object at 0x7fd2dbc09e00> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*