CVE-2022-49524

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
26/02/2025
Last modified:
24/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: pci: cx23885: Fix the error handling in cx23885_initdev()<br /> <br /> When the driver fails to call the dma_set_mask(), the driver will get<br /> the following splat:<br /> <br /> [ 55.853884] BUG: KASAN: use-after-free in __process_removed_driver+0x3c/0x240<br /> [ 55.854486] Read of size 8 at addr ffff88810de60408 by task modprobe/590<br /> [ 55.856822] Call Trace:<br /> [ 55.860327] __process_removed_driver+0x3c/0x240<br /> [ 55.861347] bus_for_each_dev+0x102/0x160<br /> [ 55.861681] i2c_del_driver+0x2f/0x50<br /> <br /> This is because the driver has initialized the i2c related resources<br /> in cx23885_dev_setup() but not released them in error handling, fix this<br /> bug by modifying the error path that jumps after failing to call the<br /> dma_set_mask().

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.14.283 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.247 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.198 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.121 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.46 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.17.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.18 (including) 5.18.3 (excluding)