CVE-2022-4382: Use After Free
A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4382?
CVE-2022-4382 is classified as a moderate severity vulnerability due to the potential for a use-after-free condition.
How do I fix CVE-2022-4382?
To fix CVE-2022-4382, update the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
What causes CVE-2022-4382?
CVE-2022-4382 is caused by a use-after-free flaw resulting from race conditions among superblock operations in the gadgetfs Linux driver.
What impact does CVE-2022-4382 have on systems?
The impact of CVE-2022-4382 can potentially lead to system crashes or unauthorized access depending on how the flaw is exploited.
Which Linux systems are affected by CVE-2022-4382?
CVE-2022-4382 affects various versions of the Linux kernel, particularly those mentioned in the affected software list.