CVE-2022-49455

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49455
In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxl_file_register_afu info_release() will be called in device_unregister() when info->dev's reference count is 0. So there is no need to call ocxl_afu_put() and kfree() again. Fix this by adding free_minor() and return to err_unregister error path.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/252768d32e92c1214aeebb5fec0844ca479bcf5c Patch
https://git.kernel.org/stable/c/8fb674216835e1f0c143762696d645facebb4685 Patch
https://git.kernel.org/stable/c/950cf957fe34d40d63dfa3bf3968210430b6491e Patch
https://git.kernel.org/stable/c/9e9087cf34ee69f4e95d146ac29385d6e367a97b Patch
https://git.kernel.org/stable/c/de65c32ace9aa70d51facc61ba986607075e3a25 Patch
https://git.kernel.org/stable/c/ee89d8dee55ab4b3b8ad8b70866b2841ba334767 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 16:11

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE CWE-415
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: ocxl: se corrige la posible doble liberación en ocxl_file_register_afu. Se llamará a info_release() en device_unregister() cuando el recuento de referencias de info->dev sea 0. Por lo tanto, no es necesario llamar a ocxl_afu_put() y kfree() nuevamente. Corrija esto agregando free_minor() y regrese a la ruta de error err_unregister.
References () https://git.kernel.org/stable/c/252768d32e92c1214aeebb5fec0844ca479bcf5c - () https://git.kernel.org/stable/c/252768d32e92c1214aeebb5fec0844ca479bcf5c - Patch
References () https://git.kernel.org/stable/c/8fb674216835e1f0c143762696d645facebb4685 - () https://git.kernel.org/stable/c/8fb674216835e1f0c143762696d645facebb4685 - Patch
References () https://git.kernel.org/stable/c/950cf957fe34d40d63dfa3bf3968210430b6491e - () https://git.kernel.org/stable/c/950cf957fe34d40d63dfa3bf3968210430b6491e - Patch
References () https://git.kernel.org/stable/c/9e9087cf34ee69f4e95d146ac29385d6e367a97b - () https://git.kernel.org/stable/c/9e9087cf34ee69f4e95d146ac29385d6e367a97b - Patch
References () https://git.kernel.org/stable/c/de65c32ace9aa70d51facc61ba986607075e3a25 - () https://git.kernel.org/stable/c/de65c32ace9aa70d51facc61ba986607075e3a25 - Patch
References () https://git.kernel.org/stable/c/ee89d8dee55ab4b3b8ad8b70866b2841ba334767 - () https://git.kernel.org/stable/c/ee89d8dee55ab4b3b8ad8b70866b2841ba334767 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 16:11

NVD link : CVE-2022-49455

Mitre link : CVE-2022-49455

CVE.ORG link : CVE-2022-49455

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free