7.8

CVE-2022-48626

In the Linux kernel, the following vulnerability has been resolved:

moxart: fix potential use-after-free on remove path

It was reported that the mmc host structure could be accessed after it
was freed in moxart_remove(), so fix this by saving the base register of
the device and using it instead of the pointer dereference.
Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.16 < 4.9.301
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.266
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.229
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.179
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.100
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.23
Linux ≫ Linux Kernel Version >= 5.16 < 5.16.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.021
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.