CVE-2022-1652

EPSS 0.5%CWE-416

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

31 May 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Affected products

n/a · kernel

References

https://bugzilla.redhat.com/show_bug.cgi?id=1832397 https://francozappa.github.io/about-bias/https://kb.cert.org/vuls/id/647177/https://security.netapp.com/advisory/ntap-20220722-0002/https://www.debian.org/security/2022/dsa-5173