Name: CVE-2022-40307: Concurrent Execution using Shared Resource with Improper Synchronization
Published: 2022-09-09T00:00:00.000Z
Keywords: CVE, CVE-2022-40307, CWE-362, CVSS 4.7, EPSS 0.00199

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

CVSS Details

CVSS 3.1 Base Score: 4.7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-bpftoolamazon-linux-ami-2-upgrade-bpftool-debuginfoamazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-294-220-533amazon-linux-ami-2-upgrade-kernel-livepatch-5-10-144-127-601amazon-linux-ami-2-upgrade-kernel-livepatch-5-15-69-37-134amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo	Oct 11, 2022	Sep 9, 2022
Amazon_linux	—	amazon-linux-upgrade-kernel	Oct 11, 2022	Sep 9, 2022
Amazon_linux_2023	View advisory ↗	amazon-linux-2023-upgrade-bpftoolamazon-linux-2023-upgrade-bpftool-debuginfoamazon-linux-2023-upgrade-kernelamazon-linux-2023-upgrade-kernel-debuginfoamazon-linux-2023-upgrade-kernel-debuginfo-common-aarch64amazon-linux-2023-upgrade-kernel-debuginfo-common-x86-64amazon-linux-2023-upgrade-kernel-develamazon-linux-2023-upgrade-kernel-headersamazon-linux-2023-upgrade-kernel-libbpfamazon-linux-2023-upgrade-kernel-libbpf-develamazon-linux-2023-upgrade-kernel-libbpf-staticamazon-linux-2023-upgrade-kernel-livepatch-6-1-10-15-42amazon-linux-2023-upgrade-kernel-toolsamazon-linux-2023-upgrade-kernel-tools-debuginfoamazon-linux-2023-upgrade-kernel-tools-develamazon-linux-2023-upgrade-perfamazon-linux-2023-upgrade-perf-debuginfoamazon-linux-2023-upgrade-python3-perfamazon-linux-2023-upgrade-python3-perf-debuginfo	Feb 17, 2025	Sep 7, 2022
Arch Linux	View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗	arch-linux-upgrade-latest	Jul 11, 2025	Sep 9, 2022
Debian	View advisory ↗	debian-upgrade-linux	Oct 3, 2022	Sep 9, 2022
Huawei Euleros 2_0_sp10	View advisory ↗	huawei-euleros-2_0_sp10-upgrade-kernelhuawei-euleros-2_0_sp10-upgrade-kernel-abi-stablelistshuawei-euleros-2_0_sp10-upgrade-kernel-toolshuawei-euleros-2_0_sp10-upgrade-kernel-tools-libshuawei-euleros-2_0_sp10-upgrade-python3-perf	Dec 22, 2022	Sep 9, 2022
Suse	—	suse-upgrade-kernel-azuresuse-upgrade-kernel-azure-basesuse-upgrade-kernel-azure-develsuse-upgrade-kernel-debug-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-basesuse-upgrade-kernel-default-develsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-develsuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-kvmsmall-basesuse-upgrade-kernel-macrossuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-preemptsuse-upgrade-kernel-preempt-develsuse-upgrade-kernel-sourcesuse-upgrade-kernel-source-azuresuse-upgrade-kernel-symssuse-upgrade-kernel-syms-azuresuse-upgrade-kernel-vanillasuse-upgrade-kernel-vanilla-basesuse-upgrade-kernel-vanilla-develsuse-upgrade-kernel-vanilla-livepatch-develsuse-upgrade-kernel-zfcpdump-mansuse-upgrade-reiserfs-kmp-default	Nov 30, 2022	Sep 9, 2022
Ubuntu	View advisory ↗	ubuntu-upgrade-linux-image-4-15-0-1058-dell300xubuntu-upgrade-linux-image-4-15-0-1112-oracleubuntu-upgrade-linux-image-4-15-0-1125-raspi2ubuntu-upgrade-linux-image-4-15-0-1133-kvmubuntu-upgrade-linux-image-4-15-0-1142-gcpubuntu-upgrade-linux-image-4-15-0-1143-snapdragonubuntu-upgrade-linux-image-4-15-0-1147-awsubuntu-upgrade-linux-image-4-15-0-1147-aws-hweubuntu-upgrade-linux-image-4-15-0-1158-azureubuntu-upgrade-linux-image-4-15-0-201-genericubuntu-upgrade-linux-image-4-15-0-201-generic-lpaeubuntu-upgrade-linux-image-4-15-0-201-lowlatencyubuntu-upgrade-linux-image-5-15-0-1012-gkeopubuntu-upgrade-linux-image-5-15-0-1022-ibmubuntu-upgrade-linux-image-5-15-0-1022-raspiubuntu-upgrade-linux-image-5-15-0-1022-raspi-nolpaeubuntu-upgrade-linux-image-5-15-0-1024-gkeubuntu-upgrade-linux-image-5-15-0-1025-kvmubuntu-upgrade-linux-image-5-15-0-1026-gcpubuntu-upgrade-linux-image-5-15-0-1026-oracleubuntu-upgrade-linux-image-5-15-0-1027-awsubuntu-upgrade-linux-image-5-15-0-1027-gkeubuntu-upgrade-linux-image-5-15-0-1030-azureubuntu-upgrade-linux-image-5-15-0-1030-azure-fdeubuntu-upgrade-linux-image-5-15-0-57-genericubuntu-upgrade-linux-image-5-15-0-57-generic-64kubuntu-upgrade-linux-image-5-15-0-57-generic-lpaeubuntu-upgrade-linux-image-5-15-0-57-lowlatencyubuntu-upgrade-linux-image-5-15-0-57-lowlatency-64kubuntu-upgrade-linux-image-5-17-0-1031-oemubuntu-upgrade-linux-image-5-19-0-1011-raspiubuntu-upgrade-linux-image-5-19-0-1011-raspi-nolpaeubuntu-upgrade-linux-image-5-19-0-1014-gcpubuntu-upgrade-linux-image-5-19-0-1014-ibmubuntu-upgrade-linux-image-5-19-0-1014-lowlatencyubuntu-upgrade-linux-image-5-19-0-1014-lowlatency-64kubuntu-upgrade-linux-image-5-19-0-1014-oracleubuntu-upgrade-linux-image-5-19-0-1015-kvmubuntu-upgrade-linux-image-5-19-0-1016-awsubuntu-upgrade-linux-image-5-19-0-1016-azureubuntu-upgrade-linux-image-5-19-0-28-genericubuntu-upgrade-linux-image-5-19-0-28-generic-64kubuntu-upgrade-linux-image-5-19-0-28-generic-lpaeubuntu-upgrade-linux-image-5-4-0-1041-ibmubuntu-upgrade-linux-image-5-4-0-1054-bluefieldubuntu-upgrade-linux-image-5-4-0-1061-gkeopubuntu-upgrade-linux-image-5-4-0-1078-raspiubuntu-upgrade-linux-image-5-4-0-1083-kvmubuntu-upgrade-linux-image-5-4-0-1091-gkeubuntu-upgrade-linux-image-5-4-0-1091-oracleubuntu-upgrade-linux-image-5-4-0-1093-awsubuntu-upgrade-linux-image-5-4-0-1097-gcpubuntu-upgrade-linux-image-5-4-0-1100-azureubuntu-upgrade-linux-image-5-4-0-1100-azure-fdeubuntu-upgrade-linux-image-5-4-0-136-genericubuntu-upgrade-linux-image-5-4-0-136-generic-lpaeubuntu-upgrade-linux-image-5-4-0-136-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-fdeubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-bluefieldubuntu-upgrade-linux-image-dell300xubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-64k-hwe-22-04ubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-22-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-generic-lpae-hwe-22-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-22-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-22-04ubuntu-upgrade-linux-image-oem-22-04aubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04ubuntu-upgrade-linux-image-virtual-hwe-22-04	Jan 7, 2023	Sep 9, 2022
Vmware Photon_os	View advisory ↗	vmware-photon_os_update_tdnf	Jan 20, 2025	Sep 9, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub