CVE-2022-28390: Debian Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Linux Linux Kernel: from 2.6.32, up to and including 5.17.1
• Netapp Hci Baseboard Management Controller: version h300e only; version h300s only; version h410c only; version h410s only; version h500e only; version h500s only; …

Published 2022-04-03. Last modified 2026-06-17.