USN-5493-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 27 Jun 2022, 01:35
Last modified:25 Jun 2026, 13:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Jun 2022, 01:35
Published
Vulnerability first disclosed
25 Jun 2026, 13:31
Last Modified
Vulnerability information updated

Description

linux, linux-hwe vulnerability It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash).

Affected Systems

  • ubuntu•linux

    < 4.15.0-188.199 | < 5.4.0-121.137

  • ubuntu•linux-hwe

    < 4.15.0-188.199~16.04.1

References (2)