In the Linux kernel, the following vulnerability has been resolved:
misc: ocxl: fix possible double free in ocxlfileregister_afu
inforelease() will be called in deviceunregister() when info->dev's reference count is 0. So there is no need to call ocxlafuput() and kfree() again.
Fix this by adding freeminor() and return to errunregister error path.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49455.json"
}