PT-2025-26118 · Linux+2 · Linux Kernel+2
Publicado
2025-06-18
·
Atualizado
2025-11-19
·
CVE-2022-50192
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free (UAF) issue was found in the Linux kernel, specifically in the
tegra20-slink SPI driver. The problem occurs when spi unregister master() is called, which decreases the reference count of the master to 0, leading to its freeing in spi controller release(). This, in turn, causes the device data to be freed, resulting in a UAF when using 'tspi'. The issue is resolved by getting the master before unregistering and putting it when finished using it.Recommendations
To resolve the issue, apply the fix for the UAF in
tegra slink remove() by getting the master before unregistering and putting it when finished using it.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Suse