High
v4l2loopback — security advisory
Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).
- Products
- v4l2loopback
- Affected versions
- 0.10.0-1, 0.10.0-1ubuntu1, 0.10.0-1ubuntu1.1, 0.10.0-1ubuntu1.2, 0.12.2-1, 0.12.3-1, 0.12.3-1ubuntu0.1, 0.12.3-1ubuntu0.2, 0.12.3-1ubuntu0.3, 0.12.3-1ubuntu0.4, 0.12.5-1ubuntu3, 0.12.5-1ubuntu4, 0.12.5-1ubuntu5, 0.12.7-2ubuntu2~22.04.1, 0.12.7-2ubuntu4, 0.12.7-2ubuntu5, 0.12.7-2ubuntu5.1, 0.12.7-2ubuntu5.2, 0.13.2-1ubuntu1, 0.15.0-0ubuntu1, 0.15.0-0ubuntu2, 0.15.0-0ubuntu2.1, 0.15.3-1ubuntu1, 0.15.3-1ubuntu2, 0.8.0-4ubuntu2, 0.9.1-4, 0.9.1-4ubuntu0.1
- Fixed versions
- Not specified
- CVEs
- CVE-2022-2652
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:40 UTC · Revision 1
Source evidence
Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).
osv:UBUNTU-CVE-2022-2652
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
v4l2loopback
Fixed versions: Not specified
Complete source record
{
"id": "755396bbc6077a23b2f4a9440cbdb15f0175e0d5520c11c70fa9028afe29ef8f",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-2652",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-2652",
"summary": "Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).",
"evidence": "osv:UBUNTU-CVE-2022-2652",
"products": [
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.8.0-4ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "0.9.1-4",
"evidence": "/affected/0/versions"
},
{
"value": "0.9.1-4ubuntu0.1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.0-1",
"evidence": "/affected/1/versions"
},
{
"value": "0.10.0-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "0.10.0-1ubuntu1.1",
"evidence": "/affected/1/versions"
},
{
"value": "0.10.0-1ubuntu1.2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.12.2-1",
"evidence": "/affected/2/versions"
},
{
"value": "0.12.3-1",
"evidence": "/affected/2/versions"
},
{
"value": "0.12.3-1ubuntu0.1",
"evidence": "/affected/2/versions"
},
{
"value": "0.12.3-1ubuntu0.2",
"evidence": "/affected/2/versions"
},
{
"value": "0.12.3-1ubuntu0.3",
"evidence": "/affected/2/versions"
},
{
"value": "0.12.3-1ubuntu0.4",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.12.5-1ubuntu3",
"evidence": "/affected/3/versions"
},
{
"value": "0.12.5-1ubuntu4",
"evidence": "/affected/3/versions"
},
{
"value": "0.12.5-1ubuntu5",
"evidence": "/affected/3/versions"
},
{
"value": "0.12.7-2ubuntu2~22.04.1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.12.7-2ubuntu4",
"evidence": "/affected/4/versions"
},
{
"value": "0.12.7-2ubuntu5",
"evidence": "/affected/4/versions"
},
{
"value": "0.12.7-2ubuntu5.1",
"evidence": "/affected/4/versions"
},
{
"value": "0.12.7-2ubuntu5.2",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.13.2-1ubuntu1",
"evidence": "/affected/5/versions"
},
{
"value": "0.15.0-0ubuntu1",
"evidence": "/affected/5/versions"
},
{
"value": "0.15.0-0ubuntu2",
"evidence": "/affected/5/versions"
},
{
"value": "0.15.0-0ubuntu2.1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.15.3-1ubuntu2",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "v4l2loopback",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.15.0-0ubuntu2",
"evidence": "/affected/7/versions"
},
{
"value": "0.15.3-1ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "0.15.3-1ubuntu2",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2022-2652",
"aliases": [
"UBUNTU-CVE-2022-2652"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"0.8.0-4ubuntu2",
"0.9.1-4",
"0.9.1-4ubuntu0.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.9.1-4ubuntu0.1"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.9.1-4ubuntu0.1"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.9.1-4ubuntu0.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"0.10.0-1",
"0.10.0-1ubuntu1",
"0.10.0-1ubuntu1.1",
"0.10.0-1ubuntu1.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.10.0-1ubuntu1.2"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.10.0-1ubuntu1.2"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.10.0-1ubuntu1.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"0.12.2-1",
"0.12.3-1",
"0.12.3-1ubuntu0.1",
"0.12.3-1ubuntu0.2",
"0.12.3-1ubuntu0.3",
"0.12.3-1ubuntu0.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.12.3-1ubuntu0.4"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.12.3-1ubuntu0.4"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.12.3-1ubuntu0.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"0.12.5-1ubuntu3",
"0.12.5-1ubuntu4",
"0.12.5-1ubuntu5",
"0.12.7-2ubuntu2~22.04.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.12.7-2ubuntu2~22.04.1"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.12.7-2ubuntu2~22.04.1"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.12.7-2ubuntu2~22.04.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"0.12.7-2ubuntu4",
"0.12.7-2ubuntu5",
"0.12.7-2ubuntu5.1",
"0.12.7-2ubuntu5.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.12.7-2ubuntu5.2"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.12.7-2ubuntu5.2"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.12.7-2ubuntu5.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"0.13.2-1ubuntu1",
"0.15.0-0ubuntu1",
"0.15.0-0ubuntu2",
"0.15.0-0ubuntu2.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.15.0-0ubuntu2.1"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.15.0-0ubuntu2.1"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.15.0-0ubuntu2.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"0.15.3-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.15.3-1ubuntu2"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.15.3-1ubuntu2"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.15.3-1ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "v4l2loopback",
"purl": "pkg:deb/ubuntu/v4l2loopback?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"0.15.0-0ubuntu2",
"0.15.3-1ubuntu1",
"0.15.3-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2652.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "v4l2loopback-dkms",
"binary_version": "0.15.3-1ubuntu2"
},
{
"binary_name": "v4l2loopback-source",
"binary_version": "0.15.3-1ubuntu2"
},
{
"binary_name": "v4l2loopback-utils",
"binary_version": "0.15.3-1ubuntu2"
}
]
}
}
],
"modified": "2026-10-17T12:55:57.495420161Z",
"provider": "osv",
"upstream": [
"CVE-2022-2652"
],
"references": [
"https://ubuntu.com/security/CVE-2022-2652",
"https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5",
"https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd",
"https://www.cve.org/CVERecord?id=CVE-2022-2652"
]
},
"related_cves": [
{
"value": "CVE-2022-2652",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 354372,
"published_at": "2022-08-04T10:15:00+00:00"
}