PT-2025-26041 · Linux+4 · Linux Kernel+4
Publicado
2022-07-12
·
Atualizado
2025-11-18
·
CVE-2022-50115
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory corruption issue has been identified in the Linux kernel, specifically in the ASoC: SOF: ipc3-topology component. The problem arises from the double freeing of
ipc control data via load bytes, which occurs when sanity checks for byte controls fail, and the locally allocated scontrol->ipc control data is freed but not set to NULL. On the error rollback path, higher-level code attempts to free scontrol->ipc control data again, leading to memory corruption.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Linux Kernel
Red Hat
Suse