VULNERABILITY INTELLIGENCE

CVE-2022-2652

CVSS score6 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2022-08-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Description

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

Weakness classification

security@huntr.dev: CWE-134

Primary references

security@huntr.dev — Patch, Third Party Advisory
security@huntr.dev — Exploit, Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Patch, Third Party Advisory