Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2022-50274

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/09/2025
Última modificación:
15/09/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: dvbdev: adopts refcnt to avoid UAF<br /> <br /> dvb_unregister_device() is known that prone to use-after-free.<br /> That is, the cleanup from dvb_unregister_device() releases the dvb_device<br /> even if there are pointers stored in file-&gt;private_data still refer to it.<br /> <br /> This patch adds a reference counter into struct dvb_device and delays its<br /> deallocation until no pointer refers to the object.

Impacto