CVE-2022-49388

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49388
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49388.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49388
Downstream
Related
Published
2025-02-26T02:11:22.326Z
Modified
2026-04-11T12:43:58.461309Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ubi: ubi_create_volume: Fix use-after-free when volume creation failed
Details

In the Linux kernel, the following vulnerability has been resolved:

ubi: ubicreatevolume: Fix use-after-free when volume creation failed

There is an use-after-free problem for 'ebatbl' in ubicreate_volume()'s error handling path:

ubiebareplacetable(vol, ebatbl) vol->ebatbl = tbl outmapping: ubiebadestroytable(ebatbl) // Free 'ebatbl' outunlock: putdevice(&vol->dev) volrelease kfree(tbl->entries) // UAF

Fix it by removing redundant 'eba_tbl' releasing. Fetch a reproducer in [Link].

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49388.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
493cfaeaa0c9bc0c79ce5751193d49fdac9aaaec
Fixed
25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9
Fixed
abb67043060f2bf4c03d7c3debb9ae980e2b6db3
Fixed
8302620aeb940f386817321d272b12411ae7d39f
Fixed
6d8d3f68cbecfd31925796f0fb668eb21ab06734
Fixed
5ff2514e4fb55dcf3d88294686040ca73ea0c1a2
Fixed
e27ecf325e51abd06aaefba57a6322a46fa4178b
Fixed
1174ab8ba36a48025b68b5ff1085000b1e510217
Fixed
8c03a1c21d72210f81cb369cc528e3fde4b45411

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49388.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
4.14.283
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.247
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.198
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.122
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.47
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.15
Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49388.json"