What’s Vulnerable › Vulnerabilities

CVE-2022-4662

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-22 · updated 2026-10-14
• Weakness: CWE-455

Description

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.

Affected products

• Linux kernel: before 6.0; 6.0-rc1, 6.0-rc2, 6.0-rc3 — fixed in 6.0

How to fix

Upgrade to a fixed version: Linux kernel 6.0. Check the vendor advisory for mitigations.

References

• https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/
• https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/
• https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/
• https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• https://cert-portal.siemens.com/productcert/html/ssa-831302.html

Get alerted when CVE-2022-4662 or the next vulnerability affects your stack