Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-50785

fsi: occ: Prevent use after free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use get_device and put_device in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check the buffer before using it in the submit function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 008d3825a805557464c5e75f9eb806a3aa2f5e6d to < 1d5ad0a874ddfcee9f932f54b1d34cbe8b9ddcfeaffected
  • 008d3825a805557464c5e75f9eb806a3aa2f5e6d to < 3593e8efc9f0dac6be70bd5c964eadaa86bf2713affected
  • 008d3825a805557464c5e75f9eb806a3aa2f5e6d to < d3e1e24604031b0d83b6c2d38f54eeea265cfcc0affected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 5.19.17 to ≤ 5.19.*unaffected
  • 6.0.3 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References