CVE-2022-1462

MediumCVSS 6.3/10Last modified Oct 14, 2026

Description

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	kernel	no information yet
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=2078466Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
https://seclists.org/oss-sec/2022/q2/155Exploit, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2078466Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
https://seclists.org/oss-sec/2022/q2/155Exploit, Mailing List, Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Jun 2, 2022
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-14638.8The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode in versions up to, a CVE-2022-14645.4Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attach CVE-2022-14656.1The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in a CVE-2022-14666.5Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. CVE-2022-14679.9Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language b CVE-2022-14684.3On all versions of 17.0.x, 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x on F5 BIG-IP, an authenticated iControl REST user with at leas CVE-2022-14694.8The FiboSearch WordPress plugin before 1.17.0 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2022-14706.1The Ultimate WooCommerce CSV Importer WordPress plugin through 2.0 does not sanitise and escape the imported data before outputting it back CVE-2022-14719.8SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provide CVE-2022-14727.2The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using th CVE-2022-14737.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash ta CVE-2022-14746.1The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the