CVE-2022-45885

A race condition flaw leading to a use-after-free issue was found in the Linux kernel media subsystem in the DVB core device driver. It could occur in the dvb_frontend() function when closing the device node of dvb_frontend if the device is disconnected. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Because exploitation of this flaw requires that an attacker has either: local privileges on and physical access to the system, or administrative privileges sufficient to virtually attach or detach harware devices, Red Hat assesses that the impact of this vulnerability as Moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the dvb-core kernel module. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.