What’s Vulnerable › Vulnerabilities

CVE-2022-3239

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-19 · updated 2026-06-17
• Weakness: CWE-416

Description

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Affected products

• Linux kernel: from 3.15 before 4.14.295; from 4.15 before 4.19.238; from 4.20 before 5.4.189; from 5.5 before 5.10.110; from 5.11 before 5.15.33; from 5.16 before 5.16.19 — fixed in 4.14.295, 4.19.238, 5.10.110, 5.15.33, 5.16.19, 5.17.2

How to fix

Upgrade to a fixed version: Linux kernel 4.14.295, 4.19.238, 5.10.110, 5.15.33. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d
• https://security.netapp.com/advisory/ntap-20230214-0006/
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d
• https://security.netapp.com/advisory/ntap-20230214-0006/

Get alerted when CVE-2022-3239 or the next vulnerability affects your stack