CVE-2022-50274

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50274
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50274.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50274
Downstream
Published
2025-09-15T14:21:10.383Z
Modified
2026-03-20T11:47:21.837067Z
Summary
media: dvbdev: adopts refcnt to avoid UAF
Details

In the Linux kernel, the following vulnerability has been resolved:

media: dvbdev: adopts refcnt to avoid UAF

dvbunregisterdevice() is known that prone to use-after-free. That is, the cleanup from dvbunregisterdevice() releases the dvbdevice even if there are pointers stored in file->privatedata still refer to it.

This patch adds a reference counter into struct dvb_device and delays its deallocation until no pointer refers to the object.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50274.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
ac521bbe3d00fa574e66a9361763f2b37725bc97
Fixed
219b44bf94203bd433aa91b7796475bf656348e5
Fixed
6d18b44bb44e1f4d97dfe0efe92ac0f0984739c2
Fixed
2abd73433872194bccdf1432a0980e4ec5273c2a
Fixed
88a6f8a72d167294c0931c7874941bf37a41b6dd
Fixed
a2f0a08aa613176c9688c81d7b598a7779974991
Fixed
9945d05d6693710574f354c5dbddc47f5101eb77
Fixed
0fc044b2b5e2d05a1fa1fb0d7f270367a7855d79

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50274.json"