CVE-2022-1652

EPSS 0.5%CWE-416

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

31 may 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Productos afectados

n/a · kernel

Referencias

https://bugzilla.redhat.com/show_bug.cgi?id=1832397 https://francozappa.github.io/about-bias/https://kb.cert.org/vuls/id/647177/https://security.netapp.com/advisory/ntap-20220722-0002/https://www.debian.org/security/2022/dsa-5173