CVE-2022-4662: Medium severity Linux Linux kernel vulnerability
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4662?
CVE-2022-4662 has a medium severity rating due to its potential to crash the system.
How do I fix CVE-2022-4662?
To fix CVE-2022-4662, upgrade to Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2022-4662?
CVE-2022-4662 affects Linux kernel versions up to 6.0 and the specific release candidates 6.0-rc1, 6.0-rc2, and 6.0-rc3.
Who can be affected by CVE-2022-4662?
Local users with access to a vulnerable system can exploit CVE-2022-4662 to crash the system.
What components are implicated in CVE-2022-4662?
CVE-2022-4662 involves the Linux kernel USB core subsystem due to incorrect access control.