Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2022-28388 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2022-28388

CVE-2022-28388

MEDIUM5.5

usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev

Published Apr 3, 2022

Modified 10 months ago

Details

usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.

References

WEB

https://github.com/torvalds/linux/commit/3d3925ff6433f98992685a9679613a2cc97f3ce2

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/

WEB

https://security.netapp.com/advisory/ntap-20220513-0001/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2022-28388

ADVISORY

https://www.debian.org/security/2022/dsa-5127

ADVISORY

https://www.debian.org/security/2022/dsa-5173

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedApr 3, 2022

ModifiedMay 5, 2025