CVE-2022-45888

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-25 · updated 2026-06-17
Weakness: CWE-362

Description

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

Affected products

Linux kernel: through 6.0.9
NetApp H300S Firmware: all versions
NetApp H410C Firmware: all versions
NetApp H410S Firmware: all versions
NetApp H500S Firmware: all versions
NetApp H700S Firmware: all versions

References

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=282a4b71816b6076029017a7bab3a9dcee12a920
https://lore.kernel.org/all/20221022175404.GA375335%40ubuntu/
https://security.netapp.com/advisory/ntap-20230113-0006/
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=282a4b71816b6076029017a7bab3a9dcee12a920
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lore.kernel.org/all/20221022175404.GA375335%40ubuntu/
https://security.netapp.com/advisory/ntap-20230113-0006/

Get alerted when CVE-2022-45888 or the next vulnerability affects your stack