CVE-2022-43750CWE-787

CVE-2022-43750

Medium · published October 26, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-10-26T08:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.21, < 4.9.3314.9.331
linux/linux_kernel≥ 4.10, < 4.14.2964.14.296
linux/linux_kernel≥ 4.15, < 4.19.2624.19.262
linux/linux_kernel≥ 4.20, < 5.4.2185.4.218
linux/linux_kernel≥ 5.5, < 5.10.1485.10.148
linux/linux_kernel≥ 5.11, < 5.15.735.15.73
linux/linux_kernel≥ 5.16, < 5.19.155.19.15
linux/linux_kernel≥ 6.0, < 6.0.16.0.1
debian/debian_linuxall versions—
References (14)
EPSS history
Timeline
  • 26 OCT 00:00Z
    drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory
    cvelistv5