CVE-2022-1652

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=1832397Issue Tracking, Not Applicable
• https://francozappa.github.io/about-bias/Not Applicable
• https://kb.cert.org/vuls/id/647177/Not Applicable, Third Party Advisory, US Government Resource
• https://security.netapp.com/advisory/ntap-20220722-0002/Third Party Advisory
• https://www.debian.org/security/2022/dsa-5173Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1832397Issue Tracking, Not Applicable
• https://francozappa.github.io/about-bias/Not Applicable
• https://kb.cert.org/vuls/id/647177/Not Applicable, Third Party Advisory, US Government Resource
• https://security.netapp.com/advisory/ntap-20220722-0002/Third Party Advisory
• https://www.debian.org/security/2022/dsa-5173Third Party Advisory

Published

Jun 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1646The Simple Real Estate Pack WordPress plugin through 1.4.8 d…4.8
• CVE-2022-1647The FormCraft WordPress plugin before 1.2.6 does not sanitis…4.8
• CVE-2022-1648Pandora FMS v7.0NG.760 and below allows a relative path trav…7.2
• CVE-2022-1649Null pointer dereference in libr/bin/format/mach0/mach0.c in…5.5
• CVE-2022-1650Improper Removal of Sensitive Information Before Storage or …9.3
• CVE-2022-1651A memory leak flaw was found in the Linux kernel in acrn_dev…7.1
• CVE-2022-1653The Social Share Buttons by Supsystic WordPress plugin befor…4.3
• CVE-2022-1654Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 al…8.8
• CVE-2022-1655An Incorrect Permission Assignment for Critical Resource fla…6.5
• CVE-2022-1656Vulnerable versions of the JupiterX Theme (<=2.0.6) allow an…5.4
• CVE-2022-1657Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX …8.8
• CVE-2022-1658Vulnerable versions of the Jupiter Theme (<= 6.10.1) allow a…5.4