CVE-2022-4382

2023-01-1022:15:14

Debian Security Bug Tracker

security-tracker.debian.org

cve-2022-4382

superblock operations

yanking out device

unix

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.6%

JSON

A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.8-1linux_6.1.8-1_all.deb
Debian11alllinux< 5.10.178-1linux_5.10.178-1_all.deb
Debian999alllinux< 6.1.8-1linux_6.1.8-1_all.deb
Debian13alllinux< 6.1.8-1linux_6.1.8-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.8-1	linux_6.1.8-1_all.deb
Debian	11	all	linux	< 5.10.178-1	linux_5.10.178-1_all.deb
Debian	999	all	linux	< 6.1.8-1	linux_6.1.8-1_all.deb
Debian	13	all	linux	< 6.1.8-1	linux_6.1.8-1_all.deb