NetSight
high7.8

CVE-2022-28390

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

Impact

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 through 5.17.1
FedoraprojectFedora
Versions 34, 35, 36
DebianDebian Linux
Versions 9.0, 10.0, 11.0
NetappHci Baseboard Management Controller
Versions h300e, h300s, h410c, h410s, h500e, h500s

Weakness classification

References