CVE-2022-48873

Source
https://cve.org/CVERecord?id=CVE-2022-48873
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48873.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48873
Downstream
Related
Published
2024-08-21T06:10:04.024Z
Modified
2026-05-15T11:54:18.852014195Z
Summary
misc: fastrpc: Don't remove map on creater_process and device_release
Details

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Don't remove map on createrprocess and devicerelease

Do not remove the map from the list on error path in fastrpcinitcreateprocess, instead call fastrpcmapput, to avoid use-after-free. Do not remove it on fastrpcdevicerelease either, call fastrpcmap_put instead.

The fastrpcfreemap is the only proper place to remove the map. This is called only after the reference count is 0.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48873.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.4.230
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.165
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.90
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48873.json"