Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-50087

firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the probe succeeds. If it is not taken care, then it could result use-after-free as the value is exported via get_scpi_ops() and could refer to a memory allocated via devm_kzalloc() but freed when the probe fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 5aa558232edc30468d1f35108826dd5b3ffe978faffected
  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 18048cba444a7c41dbf42c180d6b46606fc24c51affected
  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 08272646cd7c310642c39b7f54348fddd7987643affected
  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 0c29e149b6bb498778ed8a1c9597b51acfba7856affected
  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 87c4896d5dd7fd9927c814cf3c6289f41de3b562affected
  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87affected
  • 8cb7cf56c9fe5412de238465b27ef35b4d2801aa to < 689640efc0a2c4e07e6f88affe6d42cd40cc3f85affected

Linux Linux

Default version status: affected

  • 4.4affected
  • 0 to < 4.4unaffected
  • 4.19.256 to ≤ 4.19.*unaffected
  • 5.4.211 to ≤ 5.4.*unaffected
  • 5.10.137 to ≤ 5.10.*unaffected
  • 5.15.61 to ≤ 5.15.*unaffected
  • 5.18.18 to ≤ 5.18.*unaffected
  • 5.19.2 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References