IM
IronMonkey Threat Research

CVE-2022-4095 HIGH

Published: 2023-03-22 | Last Modified: 2025-02-26 | Status: Modified

Description

A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-416
[email protected] Primary
en CWE-416

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd340be4980> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3854bed40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3854bcc00> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3854bfac0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340be7640> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340be4400> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3854bfc40> Operating System
linux linux_kernel 6.0 <built-in method update of dict object at 0x7fd3854bf440> Operating System
linux linux_kernel 6.0 <built-in method update of dict object at 0x7fd3854bc640> Operating System
linux linux_kernel 6.0 <built-in method update of dict object at 0x7fd340be6940> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*

References