CVE-2022-48873

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not remove the map from the list on error path in fastrpc_init_create_process, instead call fastrpc_map_put, to avoid use-after-free. Do not remove it on fastrpc_device_release either, call fastrpc_map_put instead. The fastrpc_free_map is the only proper place to remove the map. This is called only after the reference count is 0.

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 < 4b5c44e924a571d0ad07054de549624fbc04e4d7, >= b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 < 193cd853145b63e670bd73740250983af1475330, >= b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 < 1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8, >= b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 < 35ddd482345c43d9eec1f3406c0f20a95ed4054b, >= b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 < 5bb96c8f9268e2fdb0e5321cbc358ee5941efc15, >= aaf5aa44934ad069cac805923c49f6968b9a0d49, >= 5.1.6 < 5.2, >= 5.2, >= 5.2 < 5.4.230, >= 5.5 < 5.10.165, >= 5.11 < 5.15.90, >= 5.16 < 6.1.8, 6.2

Fixed versions

5.4.230, 5.10.165, 5.15.90, 6.1.8

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416