CVE-2022-3890

Vulnerability Profile Updated a month ago
Download STIX
Preview STIX
CVE-2022-3890 is a vulnerability that affects the Linux kernel, which is used by many different operating systems. Specifically, this vulnerability is related to a flaw in the implementation of the Advanced Linux Sound Architecture (ALSA) subsystem. Attackers who exploit this vulnerability can gain elevated privileges on the affected system, potentially allowing them to execute arbitrary code or access sensitive information. The vulnerability was first discovered and reported by security researchers in April 2022. At the time, it was assigned a severity rating of 7.8 out of 10 by the Common Vulnerability Scoring System (CVSS), indicating a high level of risk. The vulnerability affects a wide range of Linux kernel versions, from 5.4 onwards, which means that many different operating systems could be impacted. In response to the discovery of this vulnerability, many Linux distributions released patches to address the issue. However, as with any vulnerability, there is always a risk that some systems may not have been updated in a timely manner, leaving them exposed to potential attacks. As such, it is important for organizations to ensure that they have applied the necessary patches to their systems and to remain vigilant for any signs of attack.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Associated Malware
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Threat Actors
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Vulnerabilities
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Source Document References
Information about the CVE-2022-3890 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
SourceCreatedAtTitle
CERT-EU
a year ago
Close Quarters Encounters with Third Generation Malware Compels UK and Danish Municipalities to Remodel Vulnerability Management Safeguards