CVE-2022-43750: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2022-43750 is a medium (CVSS 6.7) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 29.2% of scored vulnerabilities.
Not severe (CVSS 6.7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 42 · Related 35Timeline
- 26-10-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · Red hatEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- NVDNIST6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.35% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu90 products
- linuxAll versions (No fix recorded) | < 4.4.0-235.269 | < 4.15.0-204.215 | < 5.4.0-136.153 | < 5.15.0-57.63
- linux-aws< 4.4.0-1114.120 | < 4.4.0-1152.167 | < 4.15.0-1150.163 | < 5.4.0-1093.101 | < 5.15.0-1027.31
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
Redhat43 products
- bpftool< 0:3.10.0-1160.90.1.el7
- bpftool-debuginfo< 0:3.10.0-1160.90.1.el7
- kernel< 0:3.10.0-1160.90.1.el7
- kernel-abi-whitelists< 0:3.10.0-1160.90.1.el7
- kernel-bootwrapper< 0:3.10.0-1160.90.1.el7
Debian2 products
- linux< 6.0.2-1
- debian_linuxEOL10.0
Linux1 product
- linux_kernel≥ 2.6.21, < 4.9.331 | ≥ 4.10, < 4.14.296 | ≥ 4.15, < 4.19.262 | ≥ 4.20, < 5.4.218 | ≥ 5.5, < 5.10.148 | ≥ 5.11, < 5.15.73 | ≥ 5.16, < 5.19.15 | ≥ 6.0, < 6.0.1
4 vendors · 136 products
References
42 links- github.com/torvalds/linux/commit/a659daf63d16aa883be42f3f34ff84235c302198ARTICLEREPORTPatchThird Party Advisory