CVE-2022-50274

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
15/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: dvbdev: adopts refcnt to avoid UAF<br /> <br /> dvb_unregister_device() is known that prone to use-after-free.<br /> That is, the cleanup from dvb_unregister_device() releases the dvb_device<br /> even if there are pointers stored in file-&gt;private_data still refer to it.<br /> <br /> This patch adds a reference counter into struct dvb_device and delays its<br /> deallocation until no pointer refers to the object.

Impact