PT-2025-26118 · Linux+2 · Linux Kernel+2
Published
2025-06-18
·
Updated
2025-11-19
·
CVE-2022-50192
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free (UAF) issue was found in the Linux kernel, specifically in the
tegra20-slink SPI driver. The problem occurs when spi unregister master() is called, which decreases the reference count of the master to 0, leading to its freeing in spi controller release(). This, in turn, causes the device data to be freed, resulting in a UAF when using 'tspi'. The issue is resolved by getting the master before unregistering and putting it when finished using it.Recommendations
To resolve the issue, apply the fix for the UAF in
tegra slink remove() by getting the master before unregistering and putting it when finished using it.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse