Vulnerability CVE-2022-28389

Vulnerability Name:

CVE-2022-28389 (CCN-223320)

Assigned:

2022-03-31

Published:

2022-03-31

Updated:

2023-01-03

Summary:

CVSS v3 Severity:

5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

8.4 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2022-28389

Source: XF
Type: UNKNOWN
linux-kernel-cve202228389-code-exec(223320)

Source: CCN
Type: Linux Kernel GIT Repository
can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: Linux Kernel Web site
Linux Kernel

Vulnerable Configuration:

Configuration CCN 1:

cpe:/o:linux:linux_kernel:5.16:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:-:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8029	P	kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8090	P	reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7539	P	kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:4673	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)	2022-08-11
oval:org.opensuse.security:def:4674	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5) (Important)	2022-08-11
oval:org.opensuse.security:def:4675	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP5) (Important)	2022-08-11
oval:org.opensuse.security:def:118234	P	Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP2) (Important)	2022-08-11
oval:org.opensuse.security:def:4676	P	Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important)	2022-08-11
oval:org.opensuse.security:def:118229	P	Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:118226	P	Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:4667	P	Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP5) (Important)	2022-08-10
oval:org.opensuse.security:def:118230	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:118227	P	Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:4668	P	Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP5) (Important)	2022-08-10
oval:org.opensuse.security:def:118231	P	Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:118228	P	Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:4672	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5) (Important)	2022-08-10
oval:org.opensuse.security:def:118225	P	Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP2) (Important)	2022-08-10
oval:org.opensuse.security:def:4666	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP5) (Important)	2022-08-10
oval:org.opensuse.security:def:125385	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP4) (Important)	2022-08-09
oval:org.opensuse.security:def:125386	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP4) (Important)	2022-08-09
oval:org.opensuse.security:def:125384	P	Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP4) (Important)	2022-08-08
oval:org.opensuse.security:def:42370	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:4733	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:42269	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:102155	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:1595	P	Security update for the Linux Kernel (Important)	2022-04-26
oval:org.opensuse.security:def:42175	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:6012	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:126860	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:118437	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:127257	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:125110	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:125349	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:125694	P	Security update for the Linux Kernel (Important)	2022-04-19
oval:org.opensuse.security:def:118870	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119552	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119060	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:6327	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:4294	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118644	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:5220	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119177	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118122	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:4573	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:42174	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:118680	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:6009	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:119367	P	Security update for the Linux Kernel (Important)	2022-04-14
oval:org.opensuse.security:def:1231	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101952	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:99471	P	(Important)	2022-04-13
oval:org.opensuse.security:def:1747	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:102349	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101586	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:42265	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:1299	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:99733	P	(Important)	2022-04-13
oval:org.opensuse.security:def:1797	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:855	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101835	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:100399	P	(Important)	2022-04-13
oval:org.opensuse.security:def:1157	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:101891	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:42368	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:102305	P	Security update for the Linux Kernel (Important)	2022-04-13
oval:org.opensuse.security:def:100732	P	(Important)	2022-04-13
oval:org.opensuse.security:def:102121	P	Security update for the Linux Kernel (Important)	2022-04-12
oval:org.opensuse.security:def:1557	P	Security update for the Linux Kernel (Important)	2022-04-12

BACK