CVE-2022-45886

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.9

Description The issue is related to a use-after-free condition in the Linux kernel's DVB driver, specifically in the drivers/media/dvb-core/dvb net.c module. This condition is caused by a race between the disconnect and dvb device open functions. Exploitation of this issue could allow an attacker to cause a denial of service or elevate their privileges.

Recommendations For Linux kernel versions prior to 6.0.9, consider updating to a version 6.0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable module drivers/media/dvb-core/dvb net.c to minimize the risk of exploitation. Avoid using the dvb device open function in conjunction with the disconnect function until the issue is resolved.