Name: CVE-2022-45888: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2022-11-25T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-45888, CWE-362, CWE-416, CVSS 6.4, EPSS 0.00015

An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

CVSS Details

CVSS 3.1 Base Score: 6.4
CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux-6.1Upgrade linux	Dec 2, 2024	Nov 25, 2022
Suse	—	Upgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade dtb-appleUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-devel	Dec 19, 2022	Nov 25, 2022
Ubuntu	—	No solution exists	Jun 26, 2025	Nov 25, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business