cbcvebase.
CVE-2022-49524
published 2025-02-26

CVE-2022-49524: In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885_initdev() When the driver fails to…

PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.26%
18.1th percentile
In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885_initdev() When the driver fails to call the dma_set_mask(), the driver will get the following splat: [ 55.853884] BUG: KASAN: use-after-free in __process_removed_driver+0x3c/0x240 [ 55.854486] Read of size 8 at addr ffff88810de60408 by task modprobe/590 [ 55.856822] Call Trace: [ 55.860327] __process_removed_driver+0x3c/0x240 [ 55.861347] bus_for_each_dev+0x102/0x160 [ 55.861681] i2c_del_driver+0x2f/0x50 This is because the driver has initialized the i2c related resources in cx23885_dev_setup() but not released them in error handling, fix this bug by modifying the error path that jumps after failing to call the dma_set_mask().

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.5-1 (bookworm)linux 5.18.5-1 (bookworm)
linuxlinux——
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < 6041d1a0365baa729b6adfb6ed5386d9388018db6041d1a0365baa729b6adfb6ed5386d9388018db
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < 7b9978e1c94e569d65a0e7e719abb9340f5db4a07b9978e1c94e569d65a0e7e719abb9340f5db4a0
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < fa636e9ee4442215cd9a2e079cd5a8e1fe0cb8bafa636e9ee4442215cd9a2e079cd5a8e1fe0cb8ba
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < ca17e7a532d1a55466cc007b3f4d319541a27493ca17e7a532d1a55466cc007b3f4d319541a27493
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < 98106f100f50c487469903b9cf6d966785fc9cc398106f100f50c487469903b9cf6d966785fc9cc3
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < 86bd6a579c6c60547706cabf299cd2c9feab333286bd6a579c6c60547706cabf299cd2c9feab3332
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < 453514a874c78df1e7804e6e3aaa60c8d8deb6a8453514a874c78df1e7804e6e3aaa60c8d8deb6a8
linuxlinux>= 2bc46b3ad3c15165f91459b07ff8682478683194 < e8123311cf06d7dae71e8c5fe78e0510d20cd30be8123311cf06d7dae71e8c5fe78e0510d20cd30b
linuxlinux_kernel< 4.14.2834.14.283
linuxlinux_kernel>= 0 < 5.10.127-15.10.127-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 0 < 5.18.5-15.18.5-1
linuxlinux_kernel>= 4.15 < 4.19.2474.19.247
linuxlinux_kernel>= 4.20 < 5.4.1985.4.198
linuxlinux_kernel>= 5.11 < 5.15.465.15.46
linuxlinux_kernel>= 5.16 < 5.17.145.17.14
linuxlinux_kernel>= 5.18 < 5.18.35.18.3
linuxlinux_kernel>= 5.5 < 5.10.1215.10.121

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.