IT

Tracker / CVE-2022-49455

CVE-2022-49455

High 7.8

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxl_file_register_afu info_release() will be called in device_unregister() when info->dev's reference count is 0. So there is no need to call ocxl_afu_put() and kfree() again. Fix this by adding free_minor() and return to err_unregister error path.

Affected products and versions

linux linux_kernel · 5.11 → 5.15.46
linux linux_kernel · 5.16 → 5.17.14
linux linux_kernel · 5.18 → 5.18.3
linux linux_kernel · 5.2 → 5.4.198
linux linux_kernel · 5.5 → 5.10.121

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References