CVE-2022-1974 - A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition

CVE-2022-1974

Summary

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.

References

https://github.com/torvalds/linux/commit/da5c0f119203ad9728920456a0f52a6d850c01cd

Vulnerable Configurations

cpe:2.3:o:linux:linux_kernel:5.18:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc6:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

07-09-2022 - 15:54

Published

31-08-2022 - 16:15

Last modified

07-09-2022 - 15:54