Wind River Support Network

HomeDefectsLIN1021-4410
Fixed

LIN1021-4410 : Security Advisory - linux - CVE-2022-3239

Created: Sep 19, 2022    Updated: Sep 27, 2022
Resolved Date: Sep 26, 2022
Found In Version: 10.21.20.1
Fix Version: 10.21.20.14
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

CREATE(Triage):(User=admin) CVE-2022-3239 (https://nvd.nist.gov/vuln/detail/CVE-2022-3239)

CVEs


Live chat
Online