CVE-2022-1836

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

From the Ubuntu Security Team

Minh Yuan discovered that the floppy driver in the Linux kernel contained a race condition in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

• How can I get the fixes?
• What do statuses mean?
• Patch details

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-5470-1
• Linux kernel (OEM) vulnerabilities
• 8 June 2022
• USN-5471-1
• Linux kernel (OEM) vulnerabilities
• 8 June 2022

Other references

• https://www.openwall.com/lists/oss-security/2022/04/28/1
• https://git.kernel.org/linus/233087ca063686964a53c829d547c7571e3f67bf (5.18-rc5)
• https://www.cve.org/CVERecord?id=CVE-2022-1836