CVE-2022-49029
published 2024-10-21CVE-2022-49029: In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as…
PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Smatch report warning as follows:
drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:
'&data->list' not removed from list
If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will
be freed, but data->list will not be removed from driver_data.bmc_data,
then list traversal may cause UAF.
Fix by removeing it from driver_data.bmc_data before free().
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.12-1 (bookworm) | linux 6.0.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < f2a13196ad41c6c2ab058279dffe6c97292e753a | f2a13196ad41c6c2ab058279dffe6c97292e753a |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < 798198273bf86673b970b51acdb35e57f42b3fcb | 798198273bf86673b970b51acdb35e57f42b3fcb |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < 24b9633f7db7f4809be7053df1d2e117e7c2de10 | 24b9633f7db7f4809be7053df1d2e117e7c2de10 |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < 7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3 | 7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3 |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < 90907cd4d11351ff76c9a447bcb5db0e264c47cd | 90907cd4d11351ff76c9a447bcb5db0e264c47cd |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < 45f6e81863747c0d7bc6a95ec51129900e71467a | 45f6e81863747c0d7bc6a95ec51129900e71467a |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863 | e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863 |
| linux | linux | >= 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab < e2a87785aab0dac190ac89be6a9ba955e2c634f2 | e2a87785aab0dac190ac89be6a9ba955e2c634f2 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 2.6.24 < 4.9.335 | 4.9.335 |
| linux | linux_kernel | >= 4.10 < 4.14.301 | 4.14.301 |
| linux | linux_kernel | >= 4.15 < 4.19.268 | 4.19.268 |
| linux | linux_kernel | >= 4.20 < 5.4.226 | 5.4.226 |
| linux | linux_kernel | >= 5.11 < 5.15.82 | 5.15.82 |
| linux | linux_kernel | >= 5.16 < 6.0.12 | 6.0.12 |
| linux | linux_kernel | >= 5.5 < 5.10.158 | 5.10.158 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
vendor_redhat·2024-10-21·CVSS 7.8
CVE-2022-49029 [HIGH] CWE-416 kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Smatch report warning as follows:
drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:
'&data->list' not removed from list
If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will
be freed, but data->list will not be removed from driver_data.bmc_data,
then list traversal may cause UAF.
Fix by removeing it from driver_data.bmc_data before free().
Statement: This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (R
Debian
CVE-2022-49029: linux - In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibm...
vendor_debian·2022·CVSS 7.8
CVE-2022-49029 [HIGH] CVE-2022-49029: linux - In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibm...
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: '&data->list' not removed from list If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will be freed, but data->list will not be removed from driver_data.bmc_data, then list traversal may cause UAF. Fix by removeing it from driver_data.bmc_data before free().
Scope: local
bookworm: resolved (fixed in 6.0.12-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.12-1)
sid: resolved (fixed in 6.0.12-1)
trixie: resolved (fixed in 6.0.12-1)
GHSA
GHSA-wm5f-4g6v-fm7r: In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Smatch report
ghsa_unreviewed·2024-10-21
CVE-2022-49029 [HIGH] CWE-416 GHSA-wm5f-4g6v-fm7r: In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Smatch report
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Smatch report warning as follows:
drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:
'&data->list' not removed from list
If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will
be freed, but data->list will not be removed from driver_data.bmc_data,
then list traversal may cause UAF.
Fix by removeing it from driver_data.bmc_data before free().
OSV
CVE-2022-49029: In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report wa
osv·2024-10-21·CVSS 7.8
CVE-2022-49029 [HIGH] CVE-2022-49029: In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report wa
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: '&data->list' not removed from list If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will be freed, but data->list will not be removed from driver_data.bmc_data, then list traversal may cause UAF. Fix by removeing it from driver_data.bmc_data before free().
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/24b9633f7db7f4809be7053df1d2e117e7c2de10https://git.kernel.org/stable/c/45f6e81863747c0d7bc6a95ec51129900e71467ahttps://git.kernel.org/stable/c/798198273bf86673b970b51acdb35e57f42b3fcbhttps://git.kernel.org/stable/c/7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3https://git.kernel.org/stable/c/90907cd4d11351ff76c9a447bcb5db0e264c47cdhttps://git.kernel.org/stable/c/e2a87785aab0dac190ac89be6a9ba955e2c634f2https://git.kernel.org/stable/c/e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863https://git.kernel.org/stable/c/f2a13196ad41c6c2ab058279dffe6c97292e753a
2024-10-21
Published