CVE-2022-50305
published 2025-09-15CVE-2022-50305: In the Linux kernel, the following vulnerability has been resolved: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() sof_es8336_remove()…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_remove() calls cancel_delayed_work(). However, that
function does not wait until the work function finishes. This
means that the callback function may still be running after
the driver's remove function has finished, which would result
in a use-after-free.
Fix by calling cancel_delayed_work_sync(), which ensures that
the work is properly cancelled, no longer running, and unable
to re-schedule itself.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 6.0.11 < 6.0.16 | 6.0.16 |
| linux | linux | >= 89cdb224f2abe37ec4ac21ba0d9ddeb5a6a9cf68 < 390a1a98288a53b2e7555097d83c6e55d579b166 | 390a1a98288a53b2e7555097d83c6e55d579b166 |
| linux | linux | >= 89cdb224f2abe37ec4ac21ba0d9ddeb5a6a9cf68 < 1b41beaa7a58467505ec3023af8aad74f878b888 | 1b41beaa7a58467505ec3023af8aad74f878b888 |
| linux | linux | >= b60ee210a76cabdc2dd5396de299a1860b4945cd < b85102a3aa3810a09eb55692e8cd6ffbb304e57d | b85102a3aa3810a09eb55692e8cd6ffbb304e57d |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.0.11 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 6.1.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
vendor_redhat·2025-09-15·CVSS 7.8
CVE-2022-50305 [HIGH] CWE-362 kernel: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
kernel: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_remove() calls cancel_delayed_work(). However, that
function does not wait until the work function finishes. This
means that the callback function may still be running after
the driver's remove function has finished, which would result
in a use-after-free.
Fix by calling cancel_delayed_work_sync(), which ensures that
the work is properly cancelled, no longer running, and unable
to re-schedule itself.
Statement: The issue is a race in the ASoC sof_es8336 remove path: a delayed work item could still run after the driver was torn down, causing a use-after-free and poten
OSV
CVE-2022-50305: In the Linux kernel, the following vulnerability has been resolved: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() sof_es8336_re
osv·2025-09-15·CVSS 7.8
CVE-2022-50305 [HIGH] CVE-2022-50305: In the Linux kernel, the following vulnerability has been resolved: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() sof_es8336_re
In the Linux kernel, the following vulnerability has been resolved: ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() sof_es8336_remove() calls cancel_delayed_work(). However, that function does not wait until the work function finishes. This means that the callback function may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling cancel_delayed_work_sync(), which ensures that the work is properly cancelled, no longer running, and unable to re-schedule itself.
GHSA
GHSA-3h5g-cg8f-5hwj: In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_
ghsa_unreviewed·2025-09-15
CVE-2022-50305 [HIGH] CWE-416 GHSA-3h5g-cg8f-5hwj: In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_remove() calls cancel_delayed_work(). However, that
function does not wait until the work function finishes. This
means that the callback function may still be running after
the driver's remove function has finished, which would result
in a use-after-free.
Fix by calling cancel_delayed_work_sync(), which ensures that
the work is properly cancelled, no longer running, and unable
to re-schedule itself.
No detection rules found.
No public exploits indexed.
2025-09-15
Published