CVE-2022-1462: Debian Linux

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: affected versions not specified
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2022-06-02. Last modified 2026-06-17.