CVE-2022-49711

HIGH EPSS 16.7%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() In fsl_mc_bus_remove(), mc->root_mc_bus_dev->mc_io is passed to fsl_destroy_mc_io(). However, mc->root_mc_bus_dev is already freed in fsl_mc_device_remove(). Then reference to mc->root_mc_bus_dev->mc_io triggers KASAN use-after-free. To avoid the use-after-free, keep the reference to mc->root_mc_bus_dev->mc_io in a local variable and pass to fsl_destroy_mc_io(). This patch needs rework to apply to kernels older than v5.15.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
16.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥4.8  –  <5.10.248
linuxlinux_kernel*≥5.11  –  <5.15.49
linuxlinux_kernel*≥5.16  –  <5.18.6
linuxlinux_kernel5.19any
linuxlinux_kernel5.19any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/161b68b0a728377aaa10a8e14c70e7734f3c9ff7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/720ab105df7bf3eee62d2bddd41526b29d07d045
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/928ea98252ad75118950941683893cf904541da9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ccd1751092341ac120a961835211f9f2e3735963
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/161b68b0a728377aaa10a8e14c70e7734f3c9ff7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/720ab105df7bf3eee62d2bddd41526b29d07d045
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/928ea98252ad75118950941683893cf904541da9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ccd1751092341ac120a961835211f9f2e3735963
    Patch