What’s Vulnerable › Vulnerabilities

CVE-2022-3903

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-14 · updated 2026-06-17
• Weakness: CWE-843

Description

An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.

Affected products

• Linux kernel: 6.1-rc5

References

• https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/
• https://lore.kernel.org/all/E1obysd-009Grw-He%40www.linuxtv.org/
• https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/
• https://lore.kernel.org/all/E1obysd-009Grw-He%40www.linuxtv.org/

Get alerted when CVE-2022-3903 or the next vulnerability affects your stack