Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ola Jeppsson

#39241of 53,635
7Total CVSS
Vulnerabilities · 1
PT-2023-9450
7.0
2023-01-20
Linux · Linux Kernel · CVE-2022-48872
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use-after-free race condition in the fastrpc component of the Linux kernel. This condition can occur when one thread calls `fastrpc map get()` and another thread calls `fastrpc map lookup()` before the lock is taken in `fastrpc free map()`, potentially allowing access to a map that is about to be deleted. The vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. Technical details include the involvement of functions such as `fastrpc map get()`, `fastrpc map lookup()`, and `fastrpc free map()`, with a warning for `refcount t: addition on 0; use-after-free` and a call trace indicating the sequence of events leading to the issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.