CVE-2022-50192
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
18/06/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
spi: tegra20-slink: fix UAF in tegra_slink_remove()<br />
<br />
After calling spi_unregister_master(), the refcount of master will<br />
be decrease to 0, and it will be freed in spi_controller_release(),<br />
the device data also will be freed, so it will lead a UAF when using<br />
&#39;tspi&#39;. To fix this, get the master before unregister and put it when<br />
finish using it.