CVE-2022-49826

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double ata_host_put() in ata_tport_add() In the error path in ata_tport_add(), when calling put_device(), ata_tport_release() is called, it will put the refcount of 'ap->host'. And then ata_host_put() is called again, the refcount is decreased to 0, ata_host_release() is called, all ports are freed and set to null. When unbinding the device after failure, ata_host_stop() is called to release the resources, it leads a null-ptr-deref(), because all the ports all freed and null. Unable to handle kern...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 30e12e2be27ac6c4be2af4163c70db381364706f, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < bec9ded5404cb14e5f5470103d0973a2ff83d6a5, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < ac471468f7c16cda2525909946ca13ddbcd14000, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 377ff82c33c0cb74562a353361b64b33c09562cf, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 865a6da40ba092c18292ae5f6194756131293745, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 8c76310740807ade5ecdab5888f70ecb6d35732e, >= 4.17, >= 4.17 < 4.19.267, >= 4.20 < 5.4.225, >= 5.5 < 5.10.156, >= 5.11 < 5.15.80, >= 5.16 < 6.0.10, 6.1

Fixed versions

4.19.267, 5.4.225, 5.10.156, 5.15.80, 6.0.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-415