CVE-2022-41850: Race Condition
Last updated 25 April 2025
Other sources
roccatreportevent in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernel drivers/hid/hid-roccat.c (roccat_report_event)to a version that resolves this vulnerability.Fixed in 5.19.12
Event History
Frequently Asked Questions
What is the severity of CVE-2022-41850?
CVE-2022-41850 is identified as a high-severity vulnerability due to the potential for use-after-free attacks.
How do I fix CVE-2022-41850?
To fix CVE-2022-41850, update the Linux kernel to a version that is not affected, such as 5.10.223-1, 5.10.226-1, 6.1.123-1, or any later versions.
What systems are affected by CVE-2022-41850?
CVE-2022-41850 affects versions of the Linux kernel up to and including 5.19.12, as well as Debian Linux version 10.0.
What type of vulnerability is CVE-2022-41850?
CVE-2022-41850 is a race condition vulnerability that can lead to use-after-free issues.
Can CVE-2022-41850 be exploited remotely?
Yes, CVE-2022-41850 can potentially be exploited remotely under certain conditions involving device report handling.