CVE-2022-28389

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.17.1

Description The issue is related to a double free error in the mcba usb start xmit function in the drivers/net/can/usb/mcba usb.c file of the Linux kernel. This error can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Linux kernel versions through 5.17.1, consider updating to a version that includes a fix for the double free error in the mcba usb start xmit function. As a temporary workaround, consider restricting access to the mcba usb start xmit function in the drivers/net/can/usb/mcba usb.c file until a patch is available.