cve.bz

CVE-2022-4744

7.8 highEPSS 0.5%

High (7.8) in linux linux kernel. EPSS 0.5% chance of exploitation in the next 30 days.

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWEs
CWE-415, CWE-460
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON