CVE-2022-43750

MediumCVSS 6.7/10Last modified Oct 14, 2026

Description

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.15Release Notes, Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.1Release Notes, Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a659daf63d16aa883be42f3f34ff84235c302198Patch, Vendor Advisory
https://github.com/torvalds/linux/commit/a659daf63d16aa883be42f3f34ff84235c302198Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.15Release Notes, Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.1Release Notes, Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a659daf63d16aa883be42f3f34ff84235c302198Patch, Vendor Advisory
https://github.com/torvalds/linux/commit/a659daf63d16aa883be42f3f34ff84235c302198Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Oct 26, 2022
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-437517.8McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable poi CVE-2022-437527.8Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A lo CVE-2022-437534.3A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise M CVE-2022-437545.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enter CVE-2022-437559.8A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to continue abusing this eve CVE-2022-437567.5A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SUSE Rancher allows re CVE-2022-437578.8A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials. T CVE-2022-437586.8A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Rancher allows code execu CVE-2022-437598.8A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permission CVE-2022-43764.3An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions s CVE-2022-437608.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some h CVE-2022-437617.5Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system co