CVE-2022-48626

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48626
In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3a0a7ec5574b510b067cfc734b8bdb6564b31d4e Patch
https://git.kernel.org/stable/c/7f901d53f120d1921f84f7b9b118e87e94b403c5 Patch
https://git.kernel.org/stable/c/9c25d5ff1856b91bd4365e813f566cb59aaa9552 Patch
https://git.kernel.org/stable/c/af0e6c49438b1596e4be8a267d218a0c88a42323 Patch
https://git.kernel.org/stable/c/bd2db32e7c3e35bd4d9b8bbff689434a50893546 Patch
https://git.kernel.org/stable/c/be93028d306dac9f5b59ebebd9ec7abcfc69c156 Patch
https://git.kernel.org/stable/c/e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e Patch
https://git.kernel.org/stable/c/f5dc193167591e88797262ec78515a0cbe79ff5f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Apr 2024, 19:28

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: moxart: corrige el posible use-after-free en la ruta de eliminación. Se informó que se podía acceder a la estructura del host mmc después de que se liberó en moxart_remove(), así que solucione este problema guardando el registro base del dispositivo y usarlo en lugar de la desreferencia del puntero.
CWE CWE-416
References () https://git.kernel.org/stable/c/3a0a7ec5574b510b067cfc734b8bdb6564b31d4e - () https://git.kernel.org/stable/c/3a0a7ec5574b510b067cfc734b8bdb6564b31d4e - Patch
References () https://git.kernel.org/stable/c/7f901d53f120d1921f84f7b9b118e87e94b403c5 - () https://git.kernel.org/stable/c/7f901d53f120d1921f84f7b9b118e87e94b403c5 - Patch
References () https://git.kernel.org/stable/c/9c25d5ff1856b91bd4365e813f566cb59aaa9552 - () https://git.kernel.org/stable/c/9c25d5ff1856b91bd4365e813f566cb59aaa9552 - Patch
References () https://git.kernel.org/stable/c/af0e6c49438b1596e4be8a267d218a0c88a42323 - () https://git.kernel.org/stable/c/af0e6c49438b1596e4be8a267d218a0c88a42323 - Patch
References () https://git.kernel.org/stable/c/bd2db32e7c3e35bd4d9b8bbff689434a50893546 - () https://git.kernel.org/stable/c/bd2db32e7c3e35bd4d9b8bbff689434a50893546 - Patch
References () https://git.kernel.org/stable/c/be93028d306dac9f5b59ebebd9ec7abcfc69c156 - () https://git.kernel.org/stable/c/be93028d306dac9f5b59ebebd9ec7abcfc69c156 - Patch
References () https://git.kernel.org/stable/c/e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e - () https://git.kernel.org/stable/c/e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e - Patch
References () https://git.kernel.org/stable/c/f5dc193167591e88797262ec78515a0cbe79ff5f - () https://git.kernel.org/stable/c/f5dc193167591e88797262ec78515a0cbe79ff5f - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

26 Feb 2024, 16:32

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-26 16:27

Updated : 2024-04-17 19:28

NVD link : CVE-2022-48626

Mitre link : CVE-2022-48626

CVE.ORG link : CVE-2022-48626

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free