CVE-2022-45884: Use After Free
Published Nov 25, 2022
·Updated
A use-after-free in drivers/media/dvb-core/dvbdev.c in Linux Kernel could allow a local authenticated attacker to cause an unknown impact.
Other sources
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvbregisterdevice dynamically allocating fops.
— MITRE
Affected Software
23 affected components
Linux Linux kernel<=6.0.9
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
IBM Security Verify Governance, Identity Manager software component<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager virtual appliance component<=ISVG 10.0.2
Remediation
Event History
Nov 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Red Hat·05:36 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-45884.
2
What is the severity of CVE-2022-45884?
CVE-2022-45884 has a high severity rating.
3
What software is affected by CVE-2022-45884?
The Linux kernel versions up to 6.0.9 are affected by CVE-2022-45884.
4
What is the root cause of CVE-2022-45884?
CVE-2022-45884 is caused by a use-after-free vulnerability in drivers/media/dvb-core/dvbdev.c.
5
Is Apple macOS vulnerable to CVE-2022-45884?
No, Apple macOS is not vulnerable to CVE-2022-45884.