-

CVE-2022-50192

In the Linux kernel, the following vulnerability has been resolved:

spi: tegra20-slink: fix UAF in tegra_slink_remove()

After calling spi_unregister_master(), the refcount of master will
be decrease to 0, and it will be freed in spi_controller_release(),
the device data also will be freed, so it will lead a UAF when using
'tspi'. To fix this, get the master before unregister and put it when
finish using it.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < 415b4ce61308f24583912d887772dfcbf97f1d20
Version 26c863418221344b1cfb8e6c11116b2b81144281
Status affected
Version < 800c7767e05d29656713e04532823a752e57e037
Version 26c863418221344b1cfb8e6c11116b2b81144281
Status affected
Version < 67f77172644260482fdafc03b6025847944701e5
Version 26c863418221344b1cfb8e6c11116b2b81144281
Status affected
Version < 7e9984d183bb1e99e766c5c2b950ff21f7f7b6c0
Version 26c863418221344b1cfb8e6c11116b2b81144281
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 5.15
Status affected
Version < 5.15
Version 0
Status unaffected
Version <= 5.15.*
Version 5.15.61
Status unaffected
Version <= 5.18.*
Version 5.18.18
Status unaffected
Version <= 5.19.*
Version 5.19.2
Status unaffected
Version <= *
Version 6.0
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.056
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string