CVE-2022-3239: Use After Free
A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xxusbprobe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
Other sources
A use-after-free flaw was found in the Linux kernel’s video4linux driver in how a user triggers the em28xxusbprobe() for the Empia 28xx-based TV cards. This flaw allows a local user to crash or potentially escalate their privileges on the system.
A vulnerability was found in Linux Kernel video4linux driver for Empia 28xx. Refcount leak could happen in em28xxusbprobe() causing use-after-free which might lead to privilege escalations. The reason is the call krefget function before krefinit finished in em28xxusbprobe.
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-3239?
CVE-2022-3239 is rated as a high-severity vulnerability due to its potential for privilege escalation and system crashes.
How do I fix CVE-2022-3239?
To fix CVE-2022-3239, update your Linux kernel to versions 0:4.18.0-477.10.1.rt7.274.el8_8, 0:5.14.0-162.6.1.el9_1, or any versions specified in the remediation list.
Who is affected by CVE-2022-3239?
CVE-2022-3239 affects users of the Linux kernel, specifically those with Empia 28xx based TV cards and certain kernel versions.
What are the potential impacts of CVE-2022-3239?
The potential impacts of CVE-2022-3239 include system crashes and the potential for local users to escalate their privileges.
How can I check if I'm vulnerable to CVE-2022-3239?
You can check if you are vulnerable to CVE-2022-3239 by verifying your Linux kernel version and identifying if it falls within the vulnerable ranges.