AZL-11380
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-11380.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-11380
- Upstream
- Published
- 2022-10-30T01:15:08Z
- Modified
- 2026-04-01T05:06:57.792565Z
- Severity
-
- 6.4 (Medium) CVSS_V3 - CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2022-44032 affecting package kernel for versions less than 5.15.122.1-2
- Details
-
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cmmopen() and cm4000_detach().
- References