CVE-2022-1679High· 7.8▾ MidnightPoC availableA use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.8%
2 GitHub repos (last check)
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.
linux_kernel >= 2.6.35, < 4.14.291linux_kernel >= 4.15, < 4.19.256linux_kernel >= 4.20, < 5.4.211linux_kernel >= 5.5, < 5.10.137linux_kernel >= 5.11, < 5.15.61linux_kernel >= 5.16, < 5.18.18linux_kernel >= 5.19, < 5.19.2debian_linux = 10.0h410c_firmwareh300s_firmwareh500s_firmwareh700s_firmwareh300e_firmwareh500e_firmwareh700e_firmwareh410s_firmwareUpgrade past the affected range:
linux_kernel 5.19.2Connected by shared product, vendor, weakness, or advisory.
CVE-2022-3625Medium· 4.6A vulnerability was found in Linux Kernel
CVE-2022-3586Medium· 5.5A flaw was found in the Linux kernel’s networking code
CVE-2022-1184Medium· 5.5A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component
CVE-2022-3635Medium· 5.5A vulnerability, which was classified as critical, has been found in Linux Kernel
CVE-2022-3303Medium· 4.7A race condition flaw was found in the Linux kernel sound subsystem due to improper locking
CVE-2022-3621Medium· 4.3A vulnerability was found in Linux Kernel