CVE-2022-0487

A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=2044561Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42933c8aa14be1caa9eda41f65cde8a3a95d3e39Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00011.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5095Third Party Advisory
• https://www.debian.org/security/2022/dsa-5096Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2044561Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42933c8aa14be1caa9eda41f65cde8a3a95d3e39Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00011.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5095Third Party Advisory
• https://www.debian.org/security/2022/dsa-5096Third Party Advisory

Published

Feb 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0481NULL Pointer Dereference in Homebrew mruby prior to 3.2.7.5
• CVE-2022-0482Exposure of Private Personal Information to an Unauthorized …9.1
• CVE-2022-0483Local privilege escalation due to insecure folder permission…7.8
• CVE-2022-0484Lack of validation of URLs causes Mirantis Container Cloud L…8.8
• CVE-2022-0485A flaw was found in the copying tool `nbdcopy` of libnbd. Wh…4.8
• CVE-2022-0486Improper file permissions in the CommandPost, Collector, Sen…7.8
• CVE-2022-0488An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2022-0489An issue has been discovered in GitLab CE/EE affecting all v…5.7
• CVE-2022-0492A vulnerability was found in the Linux kernel’s cgroup_relea…7.8
• CVE-2022-0493The String locator WordPress plugin before 2.5.0 does not pr…4.9
• CVE-2022-0494A kernel information leak flaw was identified in the scsi_io…4.4
• CVE-2022-0495The library automation system product KOHA developed by Para…9.4