In the Linux kernel, the following vulnerability has been resolved:
driver: base: fix UAF when driver_attach failed
When driverattach(drv); failed, the driverprivate will be freed. But it has been added to the bus, which caused a UAF.
To fix it, we need to delete it from the bus when failed.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49385.json",
"cna_assigner": "Linux"
}