PoC Index

CVE-2022-33981

LOW 3.3EPSS 0.6%

drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.

CVSS v3.1
3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v3.1
3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v2.0
2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.56% chance of exploitation in the next 30 days, 44th percentile
Published
2022-06-18
Updated
2025-05-05

Proof-of-concept exploits (1)

References

Related