{
  "cveId": "CVE-2022-2652",
  "url": "https://patchblox.com/security/cve/CVE-2022-2652",
  "summary": "CVE-2022-2652 is fixed in v4l2loopback on 1 platform, first by DEBIAN-CVE-2022-2652, released August 4, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "v4l2loopback: Depending on the way the format strings in the card label are crafted it\u0027s possible to leak kernel stack memory",
  "description": "Depending on the way the format strings in the card label are crafted it\u0027s possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).",
  "published": "2022-08-04T10:15:07Z",
  "severity": "medium",
  "cvss": 6,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00334,
  "epssPercentile": 0.26936,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "v4l2loopback",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "0.12.7-1",
      "fix": "DEBIAN-CVE-2022-2652",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-2652",
      "released": "2022-08-04T10:15:07Z"
    },
    {
      "platform": "linux",
      "product": "v4l2loopback",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.12.7-1",
      "fix": "DEBIAN-CVE-2022-2652",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-2652",
      "released": "2022-08-04T10:15:07Z"
    },
    {
      "platform": "linux",
      "product": "v4l2loopback",
      "release": "Debian 14",
      "fixedVersion": "0.12.7-1",
      "fix": "DEBIAN-CVE-2022-2652",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-2652",
      "released": "2022-08-04T10:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}