CVE-2022-48874

Source
https://cve.org/CVERecord?id=CVE-2022-48874
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48874.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-48874
Downstream
Published
2024-08-21T06:10:05.081Z
Modified
2026-03-12T03:24:10.167110Z
Summary
misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
Details

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Fix use-after-free and race in fastrpcmapfind

Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing (fastrpcmapget) in fastrpcmapfind, which can also lead to use-after-free.

So lets merge fastrpcmapfind into fastrpcmaplookup which allows us to both protect the maps list by also taking the &fl->lock spinlock and the reference count, since the spinlock will be released only after. Add take_ref argument to make this suitable for all callers.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48874.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8f6c1d8c4f0cc316b0456788fff8373554d1d99d
Fixed
a50c5c25b6e7d2824698c0e6385f882a18f4a498
Fixed
9446fa1683a7e3937d9970248ced427c1983a1c5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48874.json"