CVE-2022-1652 | Vulnetix

CVE-2022-1652 PUBLISHED

Reported by redhat · Published May 31, 2022

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
linux_kernel	linux	5.17.10, 5.15.42, 5.10.118, 5.4.196, 4.19.245, 4.14.281, 4.9.316

Affected products

Vendor	Product	Versions
n/a	kernel	Linux Kernel through 5.17.5
n/a	kernel	5.17.5

Timeline

May 10, 2022 CVE Published
Jun 1, 2022 EPSS Score (30 in total, the first dated here)
Apr 3, 2025 PoC Published
Mar 10, 2026 Distribution Patch (20 in total, the first dated here)
Mar 10, 2026 Security Advisory (24 in total, the first dated here)
Jul 11, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-1652
vulnetix vdb fixes CVE-2022-1652

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-1652/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_MISC
x_refsource_MISC
x_refsource_MISC
DSA-5173 vendor-advisoryx_refsource_DEBIAN
x_refsource_CONFIRM

Look up in the Resolve Platform →