In the Linux kernel, the following vulnerability has been resolved:
ep93xx: clock: Fix UAF in ep93xx_clk_register_gate()
arch/arm/mach-ep93xx/clock.c:154:2: warning: Use of memory after it is freed [clang-analyzer-unix.Malloc]
arch/arm/mach-ep93xx/clock.c:151:2: note: Taking true branch
if (IS_ERR(clk))
^
arch/arm/mach-ep93xx/clock.c:152:3: note: Memory is released
kfree(psc);
^~~~~~~~~~
arch/arm/mach-ep93xx/clock.c:154:2: note: Use of memory after it is freed
return &psc->hw;
^ ~~~~~~~~
References
Configurations
Configuration 1 (hide)
|
History
24 Mar 2025, 17:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/0f12166872da46c6b57ba2f1314bbf310b3bf017 - Patch | |
| References | () https://git.kernel.org/stable/c/3b68b08885217abd9c57ff9b3bb3eb173eee02a9 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux |
27 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| Summary |
|
26 Feb 2025, 07:00
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-26 07:00
Updated : 2025-03-24 17:45
NVD link : CVE-2022-49047
Mitre link : CVE-2022-49047
CVE.ORG link : CVE-2022-49047
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free