{"id":"CVE-2022-3239","details":"A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.","modified":"2026-03-14T11:44:53.478606Z","published":"2022-09-19T20:15:12.697Z","related":["ALSA-2023:2736","ALSA-2023:2951","SUSE-SU-2022:3584-1","SUSE-SU-2022:3585-1","SUSE-SU-2022:3586-1","SUSE-SU-2022:3587-1","SUSE-SU-2022:3599-1","SUSE-SU-2022:3609-1","SUSE-SU-2022:3688-1","SUSE-SU-2022:3693-1","SUSE-SU-2022:3704-1","SUSE-SU-2022:3775-1","SUSE-SU-2022:3779-1","SUSE-SU-2022:3809-1","SUSE-SU-2022:3810-1","SUSE-SU-2022:3844-1","SUSE-SU-2022:4617-1"],"references":[{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230214-0006/"},{"type":"FIX","url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c08eadca1bdfa099e20a32f8fa4b52b2f672236d"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"3.15"},{"fixed":"4.14.295"}]},{"events":[{"introduced":"4.15"},{"fixed":"4.19.238"}]},{"events":[{"introduced":"4.20"},{"fixed":"5.4.189"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.10.110"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.15.33"}]},{"events":[{"introduced":"5.16"},{"fixed":"5.16.19"}]},{"events":[{"introduced":"5.17"},{"fixed":"5.17.2"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3239.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}