Description
A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a kernel
Linux kernel versions prior to 5.18-rc6affected
References
- https://github.com/torvalds/linux/commit/d270453a0d9ec10bb8a802a142fb1b3601a83098 ↗
- http://www.openwall.com/lists/oss-security/2022/06/05/4 ↗
- http://www.openwall.com/lists/oss-security/2022/06/09/1 ↗
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html ↗
- https://www.debian.org/security/2022/dsa-5173 ↗
- https://security.netapp.com/advisory/ntap-20220707-0007/ ↗