Vulnerability-Lookup

CVE-2022-42328 (GCVE-0-2022-42328)

Vulnerability from cvelistv5 – Published: 2022-12-07 00:00 – Updated: 2025-04-23 14:26

Summary

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).

Severity

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 14:25 UTC

CWE

unknown
CWE-667 - Improper Locking

Assigner

XEN mitre root

References

6 references

URL	Tags
https://xenbits.xenproject.org/xsa/advisory-424.txt
http://www.openwall.com/lists/oss-security/2022/12/08/3	mailing-list
http://www.openwall.com/lists/oss-security/2022/12/08/2	mailing-list
http://www.openwall.com/lists/oss-security/2022/12/09/2	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list

Impacted products

1 product

Vendor	Product	Version	CPE status
Linux	Linux	Unknown: consult Xen advisory XSA-424	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:03:45.967Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
          },
          {
            "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
          },
          {
            "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
          },
          {
            "name": "[oss-security] 20221209 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
          },
          {
            "name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
          },
          {
            "name": "[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.2,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-42328",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T14:25:41.282586Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-667",
                "description": "CWE-667 Improper Locking",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-23T14:26:39.413Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux",
          "vendor": "Linux",
          "versions": [
            {
              "status": "unknown",
              "version": "consult Xen advisory XSA-424"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329)."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "description": {
                "description_data": [
                  {
                    "lang": "eng",
                    "value": "A malicious guest could cause Denial of Service (DoS) of the host via\nthe paravirtualized network interface."
                  }
                ]
              }
            },
            "type": "unknown"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "unknown",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-24T00:00:00.000Z",
        "orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
        "shortName": "XEN"
      },
      "references": [
        {
          "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
        },
        {
          "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
        },
        {
          "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
        },
        {
          "name": "[oss-security] 20221209 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
        },
        {
          "name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
        },
        {
          "name": "[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
    "assignerShortName": "XEN",
    "cveId": "CVE-2022-42328",
    "datePublished": "2022-12-07T00:00:00.000Z",
    "dateReserved": "2022-10-03T00:00:00.000Z",
    "dateUpdated": "2025-04-23T14:26:39.413Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-42328",
      "date": "2026-09-19",
      "epss": "0.00222",
      "percentile": "0.13135"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "87B81C9D-7173-4FFB-97BC-9C41AB20A53C",
                  "versionEndExcluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329)."
        },
        {
          "lang": "es",
          "value": "Los invitados pueden provocar un punto muerto en Linux netback driver T. Este registro de informaci\u00f3n CNA se relaciona con m\u00faltiples CVE; el texto explica qu\u00e9 aspectos/vulnerabilidades corresponden a cada CVE.] El parche para XSA-392 introdujo otro problema que podr\u00eda resultar en un punto muerto al intentar liberar el SKB de un paquete ca\u00eddo debido al manejo de XSA-392 (CVE-2022- 42328). Adem\u00e1s, al descartar paquetes por otros motivos, podr\u00eda producirse el mismo punto muerto en caso de que netpoll est\u00e9 activo para la interfaz a la que est\u00e1 conectado el controlador xen-netback (CVE-2022-42329)."
        }
      ],
      "id": "CVE-2022-42328",
      "lastModified": "2024-11-21T07:24:45.703",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 1.8,
            "impactScore": 3.6,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2022-12-07T01:15:11.273",
      "references": [
        {
          "source": "security@xen.org",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
        },
        {
          "source": "security@xen.org",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
        },
        {
          "source": "security@xen.org",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
        },
        {
          "source": "security@xen.org",
          "tags": [
            "Mailing List",
            "Third Party Advisory"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
        },
        {
          "source": "security@xen.org",
          "tags": [
            "Mailing List",
            "Third Party Advisory"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
        },
        {
          "source": "security@xen.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Patch",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Third Party Advisory"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Third Party Advisory"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
        }
      ],
      "sourceIdentifier": "security@xen.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-667"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "microsoft_vex": {
      "current_release_date": "2022-12-13T00:00:00.000Z",
      "cve": "CVE-2022-42328",
      "id": "msrc_CVE-2022-42328",
      "initial_release_date": "2022-12-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).",
      "url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-42328.json",
      "version": "1"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "Linux",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "unknown",
                    "version": "consult Xen advisory XSA-424"
                  }
                ]
              }
            ],
            "source": "security@xen.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "87B81C9D-7173-4FFB-97BC-9C41AB20A53C",
                    "versionEndExcluding": "6.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329)."
          },
          {
            "lang": "es",
            "value": "Los invitados pueden provocar un punto muerto en Linux netback driver T. Este registro de informaci\u00f3n CNA se relaciona con m\u00faltiples CVE; el texto explica qu\u00e9 aspectos/vulnerabilidades corresponden a cada CVE.] El parche para XSA-392 introdujo otro problema que podr\u00eda resultar en un punto muerto al intentar liberar el SKB de un paquete ca\u00eddo debido al manejo de XSA-392 (CVE-2022- 42328). Adem\u00e1s, al descartar paquetes por otros motivos, podr\u00eda producirse el mismo punto muerto en caso de que netpoll est\u00e9 activo para la interfaz a la que est\u00e1 conectado el controlador xen-netback (CVE-2022-42329)."
          }
        ],
        "id": "CVE-2022-42328",
        "lastModified": "2026-06-17T05:04:44.170",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.5,
              "impactScore": 3.6,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2022-42328",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T14:25:41.282586Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2022-12-07T01:15:11.273",
        "references": [
          {
            "source": "security@xen.org",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
          },
          {
            "source": "security@xen.org",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
          },
          {
            "source": "security@xen.org",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
          },
          {
            "source": "security@xen.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
          },
          {
            "source": "security@xen.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
          },
          {
            "source": "security@xen.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
          }
        ],
        "sourceIdentifier": "security@xen.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-667"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-667"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T11:53:04+00:00",
      "cve": "CVE-2022-42328",
      "id": "CVE-2022-42328",
      "initial_release_date": "2022-12-08T10:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Xen Security Advisory 424 v1: guests can trigger deadlock in Linux netback driver",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-42328.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-05T17:07:56Z",
      "cve": "CVE-2022-42328",
      "id": "CVE-2022-42328",
      "initial_release_date": "2023-02-15T03:23:07Z",
      "product_status:known_affected": "269",
      "product_status:known_not_affected": "419",
      "product_status:recommended": "1133",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-42328",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-42328.json",
      "version": "45"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T13:03:45.967Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
              },
              {
                "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
                "tags": [
                  "mailing-list",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
              },
              {
                "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
                "tags": [
                  "mailing-list",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
              },
              {
                "name": "[oss-security] 20221209 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
                "tags": [
                  "mailing-list",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
              },
              {
                "name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
                "tags": [
                  "mailing-list",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
              },
              {
                "name": "[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update",
                "tags": [
                  "mailing-list",
                  "x_transferred"
                ],
                "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.2,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-42328",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-04-23T14:25:41.282586Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-667",
                    "description": "CWE-667 Improper Locking",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-23T14:26:28.432Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Linux",
              "vendor": "Linux",
              "versions": [
                {
                  "status": "unknown",
                  "version": "consult Xen advisory XSA-424"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329)."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "description": {
                    "description_data": [
                      {
                        "lang": "eng",
                        "value": "A malicious guest could cause Denial of Service (DoS) of the host via\nthe paravirtualized network interface."
                      }
                    ]
                  }
                },
                "type": "unknown"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "unknown",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-12-24T00:00:00.000Z",
            "orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
            "shortName": "XEN"
          },
          "references": [
            {
              "url": "https://xenbits.xenproject.org/xsa/advisory-424.txt"
            },
            {
              "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
              "tags": [
                "mailing-list"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2022/12/08/3"
            },
            {
              "name": "[oss-security] 20221208 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
              "tags": [
                "mailing-list"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2022/12/08/2"
            },
            {
              "name": "[oss-security] 20221209 Re: Xen Security Advisory 424 v1 (CVE-2022-42328,CVE-2022-42329) - Guests can trigger deadlock in Linux netback driver",
              "tags": [
                "mailing-list"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2022/12/09/2"
            },
            {
              "name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
              "tags": [
                "mailing-list"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
            },
            {
              "name": "[debian-lts-announce] 20221223 [SECURITY] [DLA 3245-1] linux security update",
              "tags": [
                "mailing-list"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
        "assignerShortName": "XEN",
        "cveId": "CVE-2022-42328",
        "datePublished": "2022-12-07T00:00:00.000Z",
        "dateReserved": "2022-10-03T00:00:00.000Z",
        "dateUpdated": "2025-04-23T14:26:39.413Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

MSRC_CVE-2022-42328

Vulnerability from csaf_microsoft - Published: 2022-12-02 00:00 - Updated: 2022-12-13 00:00

Summary

Scope

1 vulnerability in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Fixed: 2 products Known affected: 2 products

https://learn.microsoft.com/en-us/azure/azure-linux/tutoria…

Open the full advisory

NCSC-2024-0246

Vulnerability from csaf_ncscnl - Published: 2024-06-11 13:29 - Updated: 2024-06-11 13:29

Summary

Kwetsbaarheden verholpen in Siemens producten

Scope

100 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

Open the full advisory

OESA-2022-2147 (CVE-2022-20566)

Vulnerability from osv_openeuler – Published: 2022-12-24 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel(CVE-2022-20566)

An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.(CVE-2022-3107)

Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.(CVE-2022-3643)

An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.(CVE-2022-3903)

Severity

10.0 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-20566	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3107	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3643	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3903	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-42328	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-debugsource-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "perf-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "bpftool-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2212.3.0.0182.oe1.src.rpm"
        ],
        "x86_64": [
          "kernel-tools-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "perf-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "bpftool-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2212.3.0.0182.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "bpftool-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "bpftool-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "perf-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2212.3.0.0182.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2212.3.0.0182.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2212.3.0.0182.oe1.src.rpm"
        ],
        "x86_64": [
          "bpftool-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "perf-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2212.3.0.0182.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2212.3.0.0182.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2212.3.0.0182.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Critical"
  },
  "details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel(CVE-2022-20566)\n\nAn issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.(CVE-2022-3107)\n\nGuests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.(CVE-2022-3643)\n\nAn incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.(CVE-2022-3903)\n\nGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).(CVE-2022-42329)",
  "id": "OESA-2022-2147",
  "modified": "2026-08-06T11:05:27Z",
  "published": "2022-12-24T11:05:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2147"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-20566"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3107"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3643"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3903"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42328"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-20566",
    "CVE-2022-3107",
    "CVE-2022-3643",
    "CVE-2022-3903",
    "CVE-2022-42328"
  ]
}

OESA-2022-2162 (CVE-2022-4095)

Vulnerability from osv_openeuler – Published: 2022-12-30 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

Security Fix(es):

A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.(CVE-2022-4095)

There are null-ptr-deref vulnerabilities in drivers/net/slip of linux that allow attacker to crash linux kernel by simulating slip network card from user-space of linux.

[Root cause]

When a slip driver is detaching, the slip_close() will act to cleanup necessary resources and sl->tty is set to NULL in slip_close(). Meanwhile, the packet we transmit is blocked, sl_tx_timeout() will be called. Although slip_close() and sl_tx_timeout() use sl->lock to synchronize, we don`t judge whether sl->tty equals to NULL in sl_tx_timeout() and the null pointer dereference bug will happen.

We set NULL to sl->tty in position (1) and dereference sl->tty in position (2).

------------------------------------------(CVE-2022-41858)

A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.(CVE-2022-4129)

In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220738351References: Upstream kernel(CVE-2022-20568)

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel(CVE-2022-20572)

A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.(CVE-2022-4378)

In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.(CVE-2022-41218)

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.(CVE-2022-47518)

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.(CVE-2022-47519)

An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.(CVE-2022-47520)

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.(CVE-2022-47521)

An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().(CVE-2022-3108)

Severity

10.0 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-4095	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-41858	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-4129	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-20568	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-20566	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3643	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-20572	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-4378	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-41218	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-42328	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-42329	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-47518	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-47519	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-47520	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-47521	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3108	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-headers-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-tools-devel-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "python3-perf-debuginfo-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "bpftool-debuginfo-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "perf-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "python3-perf-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-debuginfo-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-devel-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "bpftool-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-source-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-tools-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "perf-debuginfo-5.10.0-60.74.0.98.oe2203.aarch64.rpm",
          "kernel-debugsource-5.10.0-60.74.0.98.oe2203.aarch64.rpm"
        ],
        "src": [
          "kernel-5.10.0-60.74.0.98.oe2203.src.rpm"
        ],
        "x86_64": [
          "kernel-source-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-debugsource-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-debuginfo-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "bpftool-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "bpftool-debuginfo-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-tools-devel-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "python3-perf-debuginfo-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-devel-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-headers-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "python3-perf-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-tools-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "perf-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "perf-debuginfo-5.10.0-60.74.0.98.oe2203.x86_64.rpm",
          "kernel-5.10.0-60.74.0.98.oe2203.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.0-60.74.0.98.oe2203"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Critical"
  },
  "details": "\r\n\r\nSecurity Fix(es):\r\n\r\nA use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.(CVE-2022-4095)\r\n\r\nThere are null-ptr-deref vulnerabilities in drivers/net/slip of linux that allow attacker to\ncrash linux kernel by simulating slip network card from user-space of linux.\r\n\r\n------------------------------------------\r\n\r\n[Root cause]\r\n\r\nWhen a slip driver is detaching, the slip_close() will act to\ncleanup necessary resources and sl-\u0026gt;tty is set to NULL in\nslip_close(). Meanwhile, the packet we transmit is blocked,\nsl_tx_timeout() will be called. Although slip_close() and\nsl_tx_timeout() use sl-\u0026gt;lock to synchronize, we don`t judge\nwhether sl-\u0026gt;tty equals to NULL in sl_tx_timeout() and the\nnull pointer dereference bug will happen.\r\n\r\n(Thread 1) | (Thread 2)\n| slip_close()\n| spin_lock_bh(\u0026amp;sl-\u0026gt;lock)\n| ...\n... | sl-\u0026gt;tty = NULL //(1)\nsl_tx_timeout() | spin_unlock_bh(\u0026amp;sl-\u0026gt;lock)\nspin_lock(\u0026amp;sl-\u0026gt;lock); |\n... | ...\ntty_chars_in_buffer(sl-\u0026gt;tty)|\nif (tty-\u0026gt;ops-\u0026gt;..) //(2) |\n... | synchronize_rcu()\r\n\r\nWe set NULL to sl-\u0026gt;tty in position (1) and dereference sl-\u0026gt;tty\nin position (2).\r\n\r\n------------------------------------------(CVE-2022-41858)\r\n\r\nA flaw was found in the Linux kernel\u0026apos;s Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.(CVE-2022-4129)\r\n\r\nIn (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220738351References: Upstream kernel(CVE-2022-20568)\r\n\r\nIn l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel(CVE-2022-20566)\r\n\r\nGuests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.(CVE-2022-3643)\r\n\r\nIn verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel(CVE-2022-20572)\r\n\r\nA stack overflow flaw was found in the Linux kernel\u0026apos;s SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.(CVE-2022-4378)\n\nIn drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.(CVE-2022-41218)\n\nGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).(CVE-2022-42328)\n\nGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).(CVE-2022-42329)\n\nAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.(CVE-2022-47518)\n\nAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames.(CVE-2022-47519)\n\nAn issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.(CVE-2022-47520)\n\nAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.(CVE-2022-47521)\n\nAn issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().(CVE-2022-3108)",
  "id": "OESA-2022-2162",
  "modified": "2026-08-06T11:05:28Z",
  "published": "2022-12-30T11:05:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2162"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4095"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41858"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4129"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-20568"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-20566"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3643"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-20572"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4378"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41218"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42328"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42329"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47518"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47519"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47520"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47521"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3108"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-4095",
    "CVE-2022-41858",
    "CVE-2022-4129",
    "CVE-2022-20568",
    "CVE-2022-20566",
    "CVE-2022-3643",
    "CVE-2022-20572",
    "CVE-2022-4378",
    "CVE-2022-41218",
    "CVE-2022-42328",
    "CVE-2022-42329",
    "CVE-2022-47518",
    "CVE-2022-47519",
    "CVE-2022-47520",
    "CVE-2022-47521",
    "CVE-2022-3108"
  ]
}

SSA-625862

Vulnerability from csaf_siemens - Published: 2024-06-11 00:00 - Updated: 2024-06-11 00:00

Summary

SSA-625862: Multiple Vulnerabilities in Third-Party Components in SIMATIC CP 1542SP-1 and CP 1543SP-1 before V2.3

Scope

23 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Known affected: 6 products

https://support.industry.siemens.com/cs/ww/en/view/109954475/

Open the full advisory

SSA-794697

Vulnerability from csaf_siemens - Published: 2023-06-13 00:00 - Updated: 2024-04-09 00:00

Summary

SSA-794697: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP before V1.1

Scope

168 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Known affected: 1 product

https://support.industry.siemens.com/cs/ww/en/view/109827684/

Open the full advisory

SUSE-SU-2022:4504-1

Vulnerability from csaf_suse - Published: 2022-12-16 12:28 - Updated: 2022-12-16 12:28

Summary

Security update for the Linux Kernel

Severity

Important

Scope

22 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.7 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 34 products

Open the full advisory

SUSE-SU-2022:4505-1

Vulnerability from csaf_suse - Published: 2022-12-16 12:29 - Updated: 2022-12-16 12:29

Summary

Security update for the Linux Kernel

Severity

Important

Scope

16 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.7 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 12 products

Open the full advisory

SUSE-SU-2022:4566-1

Vulnerability from csaf_suse - Published: 2022-12-19 12:50 - Updated: 2022-12-19 12:50

Summary

Security update for the Linux Kernel

Severity

Important

Scope

16 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.7 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 67 products

Open the full advisory

SUSE-SU-2022:4573-1

Vulnerability from csaf_suse - Published: 2022-12-19 16:56 - Updated: 2022-12-19 16:56

Summary

Security update for the Linux Kernel

Severity

Important

Scope

38 vulnerabilities in this advisory, including CVE-2022-42328.

CVE-2022-42328

5.7 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 103 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2022-42328 (GCVE-0-2022-42328)

OESA-2022-2147 (CVE-2022-20566)

OESA-2022-2162 (CVE-2022-4095)

Tags

Sightings

Nomenclature

Related by attack behaviour