CVE-2022-33981: Debian Linux

Low severity, CVSS 3.3. EPSS: 0.6% chance of exploitation in the next 30 days.

drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Linux Linux Kernel: before 5.17.6 (fixed in 5.17.6)

Published 2022-06-18. Last modified 2026-06-17.