UBUNTU-CVE-2022-45886

UBUNTU-CVE-2022-45886 PUBLISHED CVSS 7 HIGH

Record from OSV · Published November 25, 2022

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
linux-nvidia-6.2	Ubuntu:22.04:LTS	6.2.0-1011.11
linux-oracle	Ubuntu:20.04:LTS	5.4.0-1108.117
linux-gcp-fips	Ubuntu:Pro:FIPS-updates:20.04:LTS	5.4.0-1112.121+fips1
linux-hwe-5.15	Ubuntu:20.04:LTS	5.15.0-83.92~20.04.1
linux-aws	Ubuntu:22.04:LTS	5.15.0-1044.49
linux-aws	Ubuntu:20.04:LTS	5.4.0-1109.118
linux-gkeop-5.15	Ubuntu:20.04:LTS	5.15.0-1027.32~20.04.1
linux-aws-6.2	Ubuntu:22.04:LTS	6.2.0-1013.13~22.04.1
linux-nvidia-tegra-igx	Ubuntu:22.04:LTS	5.15.0-1004.4
linux-ibm-5.4	Ubuntu:Pro:18.04:LTS	5.4.0-1056.61~18.04.1
linux-aws-5.4	Ubuntu:Pro:18.04:LTS	5.4.0-1109.118~18.04.1
linux-azure-5.15	Ubuntu:20.04:LTS	5.15.0-1046.53~20.04.1

28 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Ubuntu:20.04:LTS	linux-oem-5.10	5.10.0-1023.24, 5.10.0-1034.35, 5.10.0-1038.40
Ubuntu:22.04:LTS	linux-azure-fde-5.19	5.19.0-1027.30~22.04.2.1, 0, 5.19.0-1026.29~22.04.1.1
Ubuntu:20.04:LTS	linux-riscv-5.8	5.8.0-14.16~20.04.3, 0, 5.8.0-17.19~20.04.1
Ubuntu:22.04:LTS	linux-nvidia-6.2	6.2.0-1010.10, 6.2.0-1009.9, 6.2.0-1003.3~22.04.1
Ubuntu:Pro:14.04:LTS	linux	3.13.0-112.159, 3.13.0-113.160, 3.13.0-115.162
Ubuntu:Pro:16.04:LTS	linux-kvm	4.4.0-1159.170, 4.4.0-1160.171, 4.4.0-1161.172
Ubuntu:20.04:LTS	linux-oracle	5.4.0-1022.22, 0, 5.3.0-1002.2
Ubuntu:Pro:18.04:LTS	linux	4.15.0-229.241, 4.15.0-142.146, 4.15.0-143.147
Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	0, 5.4.0-1022.22+fips1
Ubuntu:22.04:LTS	linux-riscv	5.15.0-1014.16, 5.15.0-1012.13, 5.15.0-1011.12
Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	5.4.0-1108.117+fips1, 5.4.0-1109.118+fips1, 5.4.0-1110.119+fips1
Ubuntu:Pro:20.04:LTS	linux-riscv-5.15	5.15.0-1061.65~20.04.1, 5.15.0-1063.67~20.04.1, 5.15.0-1064.68~20.04.1
Ubuntu:Pro:16.04:LTS	linux-hwe	4.15.0-136.140~16.04.1, 4.10.0-27.30~16.04.2, 4.10.0-28.32~16.04.2
Ubuntu:20.04:LTS	linux-hwe-5.15	5.15.0-76.83~20.04.1, 5.15.0-82.91~20.04.1, 5.15.0-75.82~20.04.1
Ubuntu:Pro:FIPS:20.04:LTS	linux-fips	0, 5.4.0-1007.8
Ubuntu:Pro:FIPS-updates:16.04:LTS	linux-fips	4.4.0-1026.31, 0, 4.4.0-1003.3
Ubuntu:22.04:LTS	linux-aws	5.15.0-1027.31, 5.15.0-1028.32, 5.15.0-1030.34
Ubuntu:22.04:LTS	linux-nvidia	5.15.0-1048.48, 5.15.0-1054.55, 5.15.0-1055.56
Ubuntu:22.04:LTS	linux-azure-5.19	0, 5.19.0-1020.21~22.04.1, 5.19.0-1021.22~22.04.1
Ubuntu:Pro:18.04:LTS	linux-oracle	4.15.0-1089.98, 4.15.0-1066.74, 4.15.0-1065.73

…and 133 more

Timeline

Nov 25, 2022 CVE Published
Oct 28, 2026 CVE Updated
Oct 30, 2026 Distribution Patch (2 in total, the first dated here)
Oct 30, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln UBUNTU-CVE-2022-45886
vulnetix vdb fixes UBUNTU-CVE-2022-45886

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/UBUNTU-CVE-2022-45886/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →