CVE-2022-50192

HIGH EPSS 10.9%

Published Jun 18, 20251y ago · Modified Jun 17, 20261w ago

7.8 CVSS 3.1

High

Published Jun 18, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: spi: tegra20-slink: fix UAF in tegra_slink_remove() After calling spi_unregister_master(), the refcount of master will be decrease to 0, and it will be freed in spi_controller_release(), the device data also will be freed, so it will lead a UAF when using 'tspi'. To fix this, get the master before unregister and put it when finish using it.

CVSS Details

Base Score

7.8

Exploitability

1.8

Impact

5.9

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

10.9% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 3

Vendor	Product	Version	Range
linux	linux_kernel	*	≥5.15 – <5.15.61
linux	linux_kernel	*	≥5.16 – <5.18.18
linux	linux_kernel	*	≥5.19 – <5.19.2

References 4

git.kernel.org https://git.kernel.org/stable/c/415b4ce61308f24583912d887772dfcbf97f1d20

Patch
git.kernel.org https://git.kernel.org/stable/c/67f77172644260482fdafc03b6025847944701e5

Patch
git.kernel.org https://git.kernel.org/stable/c/7e9984d183bb1e99e766c5c2b950ff21f7f7b6c0

Patch
git.kernel.org https://git.kernel.org/stable/c/800c7767e05d29656713e04532823a752e57e037

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/415b4ce61308f24583912d887772dfcbf97f1d20

Patch
git.kernel.org https://git.kernel.org/stable/c/67f77172644260482fdafc03b6025847944701e5

Patch
git.kernel.org https://git.kernel.org/stable/c/7e9984d183bb1e99e766c5c2b950ff21f7f7b6c0

Patch
git.kernel.org https://git.kernel.org/stable/c/800c7767e05d29656713e04532823a752e57e037

Patch