CVE-2022-40522

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Memory corruption in Linux Networking due to double free while handling a hyp-assign.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonCSR8811; FastConnect 6200; IPQ6000; IPQ6005; IPQ6010; IPQ6018; IPQ6028; IPQ9008; IPQ9574; QCA4024; QCA6574A; QCA6574AU; QCA6595AU; QCA6696; QCA8072; QCA8075; QCA8081; QCA8082; QCA8084; QCA8085
qualcommcsr8811_firmware<= *
qualcommfastconnect_6200_firmware<= *
qualcommipq6000_firmware<= *
qualcommipq6005_firmware<= *
qualcommipq6010_firmware<= *
qualcommipq6018_firmware<= *
qualcommipq6028_firmware<= *
qualcommipq9008_firmware<= *
qualcommipq9574_firmware<= *
qualcommqca4024_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6595au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca8072_firmware<= *
qualcommqca8075_firmware<= *
qualcommqca8081_firmware<= *
qualcommqca8082_firmware<= *
qualcommqca8084_firmware<= *
qualcommqca8085_firmware<= *
qualcommqca8386_firmware<= *
qualcommqcn5021_firmware<= *
qualcommqcn5022_firmware<= *
qualcommqcn5052_firmware<= *
qualcommqcn5121_firmware<= *
qualcommqcn5122_firmware<= *
qualcommqcn5152_firmware<= *
qualcommqcn6023_firmware<= *
qualcommqcn6024_firmware<= *
qualcommqcn9000_firmware<= *
qualcommqcn9022_firmware<= *
qualcommqcn9024_firmware<= *
qualcommqcn9070_firmware<= *
qualcommqcn9072_firmware<= *
qualcommqcn9074_firmware<= *
qualcommqcn9274_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsm7250p_firmware<= *
qualcommwcd9380_firmware<= *
qualcommwcd9385_firmware<= *
qualcommwsa8810_firmware<= *

References

Timeline

Published
Jun 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-405235.5Information disclosure in Kernel due to indirect branch misprediction.CVE-2022-405247.8Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.CVE-2022-405255.5Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.CVE-2022-405277.5Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.CVE-2022-405297.8Memory corruption due to improper access control in kernel while processing a mapping request from root process.CVE-2022-40534.8A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function ofCVE-2022-405307.8Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.CVE-2022-405317.8Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.CVE-2022-405327.8Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.CVE-2022-405335.5Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.CVE-2022-405347.8Memory corruption due to improper validation of array index in Audio.CVE-2022-405357.5Transient DOS due to buffer over-read in WLAN while sending a packet to device.
CVE-2022-40522: High severity, CVSS 7.8 | Vulnix