CVE-2022-41218 is a use-after-free vulnerability in the Linux kernel, specifically within the dvb-core DVB subsystem, affecting versions up to 5.19.10. This flaw, caused by reference count races in dvb_demux_open and dvb_dmxdev_release, impacts Debian and other Linux distributions utilizing the vulnerable kernel versions. With a CVSS score of 5.5 (Medium), it requires local access and low privileges to achieve a high impact on availability, potentially leading to system crashes. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 5.19.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
11.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
kernel: Report vmalloc UAF in dvb-core/dmxdev
Sep 23, 2022In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10 there is a use-after-free caused by refcount races affecting dvb_demux_open and dvb_dmxdev_release.
Sep 13, 2022