In the Linux kernel, the following vulnerability has been resolved:
spi: Fix simplification of devmspiregister_controller
This reverts commit 59ebbe40fb51 ("spi: simplify devmspiregister_controller").
If devmaddaction() fails in devmaddactionorreset(), devmspiunregister() will be called, it decreases the refcount of 'ctlr->dev' to 0, then it will cause uaf in the drivers that calling spiputcontroller() in error path.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50190.json"
}