CVE-2022-4662

Published: Dec 22, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.

Affected (4)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 6.0
Linux Linux Kernel	Version 6.0 rc1
Linux Linux Kernel	Version 6.0 rc2
Linux Linux Kernel	Version 6.0 rc3

Related CWEs

CWE-455

Non-exit on Failed Initialization

The product does not exit or otherwise modify its operation when security-relevant errors occur during initialization, such as when a configuration file has a format error or a hardware security module (HSM) cannot be activated, which can cause the product to execute in a less secure fashion than intended by the administrator.

References (4)

https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/

Source: secalert@redhat.com

https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/

Source: secalert@redhat.com

https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.