Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-48873

misc: fastrpc: Don't remove map on creater_process and device_release

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not remove the map from the list on error path in fastrpc_init_create_process, instead call fastrpc_map_put, to avoid use-after-free. Do not remove it on fastrpc_device_release either, call fastrpc_map_put instead. The fastrpc_free_map is the only proper place to remove the map. This is called only after the reference count is 0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to < 4b5c44e924a571d0ad07054de549624fbc04e4d7affected
  • b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to < 193cd853145b63e670bd73740250983af1475330affected
  • b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to < 1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8affected
  • b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to < 35ddd482345c43d9eec1f3406c0f20a95ed4054baffected
  • b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to < 5bb96c8f9268e2fdb0e5321cbc358ee5941efc15affected
  • aaf5aa44934ad069cac805923c49f6968b9a0d49affected
  • 5.1.6 to < 5.2affected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 5.4.230 to ≤ 5.4.*unaffected
  • 5.10.165 to ≤ 5.10.*unaffected
  • 5.15.90 to ≤ 5.15.*unaffected
  • 6.1.8 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References