CVE-2022-4382 - A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver

CVE-2022-4382

Summary

A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

References

https://www.openwall.com/lists/oss-security/2022/12/14/5

Vulnerable Configurations

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

14-01-2023 - 03:53

Published

10-01-2023 - 22:15

Last modified

14-01-2023 - 03:53