VDB
GHSA-vrgc-f9hx-wg45
GHSA-vrgc-f9hx-wg45
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Record from GitHub Advisory Database · Published October 30, 2022
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between scr24x_open() and scr24x_remove().
Risk scores
CVSS 3.1
6.400000095367432
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Oct 30, 2022 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-vrgc-f9hx-wg45
vulnetix vdb fixes GHSA-vrgc-f9hx-wg45
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-vrgc-f9hx-wg45/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15 url
- https://lore.kernel.org/lkml/20220916050333.GA188358@ubuntu url
- https://nvd.nist.gov/vuln/detail/CVE-2022-44034 advisory
- https://lore.kernel.org/lkml/20220916050333.GA188358%40ubuntu url
- https://lore.kernel.org/lkml/20220919101825.GA313940%40ubuntu url
- https://lore.kernel.org/lkml/20220919101825.GA313940@ubuntu url