CVE-2022-3239

2022-09-1900:00:00

CWE-416

redhat

www.cve.org

linux

kernel

video4linux

flaw

use after free

driver

empia 28xx

tv cards

local user

privilege escalation

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Linux kernel 5.18-rc1",
        "status": "affected"
      }
    ]
  }
]