CVE-2022-48670
Published: May 3, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adev_release() When auxiliary_device_add() returns an error, auxiliary_device_uninit() is called, which causes refcount for device to be decremented and .release callback will be triggered. Because adev_release() re-calls auxiliary_device_uninit(), it will cause use-after-free: [ 1269.455172] WARNING: CPU: 0 PID: 14267 at lib/refcount.c:28 refcount_warn_saturate+0x110/0x15 [ 1269.464007] refcount_t: underflow; use-after-free.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 6523d3b2ffa238ac033c34a726617061d6a744aa - < c87f1f99e26ea4ae08cabe753ae98e5626bdba89affected 6523d3b2ffa238ac033c34a726617061d6a744aa - < 1c11289b34ab67ed080bbe0f1855c4938362d9cf |
Linux | Linux | affected 5.18unaffected 0 - < 5.18unaffected 5.19.10 - <= 5.19.*unaffected 6.0 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now