CVE-2022-1734

HIGH

CVSS Score

Published: May 18, 2022 at 04:28 PM UTC

Updated: August 26, 2026 at 06:21 PM UTC

19 products affected across 4 vendorsLinux KernelDebian LinuxH700S Firmware

Using kernel by N/A?

Get instant alerts when new vulnerabilities affect kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7

Exploit prediction

EPSS 0.5%

Description

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0 9.0

Linux Kernel · Linux

95%

4.10 ≤ v < 4.14.2784.15 ≤ v < 4.19.2424.20 ≤ v < 5.4.1934.4 ≤ v < 4.9.3135.11 ≤ v < 5.15.395.16 ≤ v < 5.17.75.5 ≤ v < 5.10.1155.18 rc1 5.18 rc2 5.18 rc3 5.18 rc4 5.18 rc5

Affected range stops below 4.14.278, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.242, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.313, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.115, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.39, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.17.7, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.193, so it looks safe — our inference, not a vendor statement

H300E Firmware · NetAppdrupal

95%

All versions

netapp-h300e (same device)

H300S Firmware · NetAppdrupal