CVE-2022-1652

EPSS 0.5%CWE-416

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

31 mai 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Produtos afetados

n/a · kernel

Referências

https://bugzilla.redhat.com/show_bug.cgi?id=1832397 https://francozappa.github.io/about-bias/https://kb.cert.org/vuls/id/647177/https://security.netapp.com/advisory/ntap-20220722-0002/https://www.debian.org/security/2022/dsa-5173