CVE-2022-3903: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.

Affected products

• Linux Linux Kernel: version 6.1 only

Published 2022-11-14. Last modified 2026-06-17.