Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-40307HistorySep 09, 2022 - 5:15 a.m.
CVE-2022-40307
2022-09-0905:15:07
Debian Security Bug Tracker
security-tracker.debian.org
54
linux kernel
firmware handling
race condition
use-after-free
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
5.1%
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 5.19.11-1 | linux_5.19.11-1_all.deb |
| Debian | 11 | all | linux | < 5.10.149-1 | linux_5.10.149-1_all.deb |
| Debian | 999 | all | linux | < 5.19.11-1 | linux_5.19.11-1_all.deb |
| Debian | 13 | all | linux | < 5.19.11-1 | linux_5.19.11-1_all.deb |
Related
cbl_mariner
cbl_mariner
CVE-2022-40307 affecting package kernel 5.10.134.1-2
2022-10-04 07:51:40
CVE-2022-40307 affecting package kernel for versions less than 5.15.70.1-1
2022-10-17 22:54:53
nvd
nvd
CVE-2022-40307
2022-09-09 05:15:07
cve
cve
CVE-2022-40307
2022-09-09 05:15:07
veracode
veracode
Denial Of Service (DoS)
2023-01-17 17:10:23
prion
prion
Race condition
2022-09-09 05:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2022-40307)
2023-03-28 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5790-1)
2023-01-07 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:3810-1)
2022-11-01 00:00:00
ubuntucve
ubuntucve
CVE-2022-40307
2022-09-09 00:00:00
redhatcve
redhatcve
CVE-2022-40307
2022-09-16 10:17:28
cvelist
cvelist
CVE-2022-40307
2022-09-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5790-1)
2023-01-09 00:00:00
Ubuntu: Security Advisory (USN-5791-3)
2023-01-11 00:00:00
Ubuntu: Security Advisory (USN-5791-1)
2023-01-09 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-01-06 00:00:00
Linux kernel (Azure) vulnerabilities
2023-01-10 00:00:00
Linux kernel vulnerabilities
2023-01-06 00:00:00
osv
osv
linux-azure vulnerabilities
2023-01-09 20:51:27
amazon
amazon
Important: kernel
2022-09-30 07:04:00
Important: kernel
2022-09-30 07:04:00
Important: kernel
2022-09-30 02:41:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-10-23 23:35:49
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
debian
debian
[SECURITY] [DSA 5257-1] linux security update
2022-10-18 21:06:43
[SECURITY] [DLA 3131-1] linux security update
2022-10-02 16:44:48
[SECURITY] [DLA 3173-1] linux-5.10 security update
2022-11-01 20:57:30
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0275
2022-11-04 00:00:00
redos
redos
ROS-20221220-01
2022-12-20 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-11-29 21:04:28
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
2023-06-15 12:00:00
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2022-40307