In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.
Fix
Public exploits 1
- Tobey123/CVE-2022-41218 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 2
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/dvb-core/dmxdev.c Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/dvb-core/dmxdev.c Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · linux, debianNVD modified 2026-10-14 18:17
Affected (CPE criteria) 2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
References 19
- http://www.openwall.com/lists/oss-security/2022/09/23/4 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/09/24/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/09/24/2 Mailing List, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fd3d91ab1c6ab0628fe642dd570b56302c30a792
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/dvb-core/dmxdev.c Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://lore.kernel.org/all/20220908132754.30532-1-tiwai%40suse.de/
- https://www.debian.org/security/2023/dsa-5324 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/09/23/4 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/09/24/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/09/24/2 Mailing List, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fd3d91ab1c6ab0628fe642dd570b56302c30a792
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/dvb-core/dmxdev.c Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://lore.kernel.org/all/20220908132754.30532-1-tiwai%40suse.de/
- https://www.debian.org/security/2023/dsa-5324 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html