CVE-2022-49951
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49951
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49951.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-49951
- Related
- Published
- 2025-06-18T11:15:22Z
- Modified
- 2025-06-18T16:01:33Z
- Downstream
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
firmware_loader: Fix use-after-free during unregister
In the following code within firmwareuploadunregister(), the call to deviceunregister() could result in the devrelease function freeing the fwuploadpriv structure before it is dereferenced for the call to moduleput(). This bug was found by the kernel test robot using CONFIGKASAN while running the firmware selftests.
deviceunregister(&fwsysfs->dev); moduleput(fwupload_priv->module);
The problem is fixed by copying fwuploadpriv->module to a local variable for use when calling device_unregister().
- References
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source