CVE-2022-1734

2022-05-1816:28:09

CWE-416

redhat

www.cve.org

linux kernel

nfcmrvl_nci_unregister_dev

use after free

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux kernel versions prior to 5.18-rc6"
      }
    ]
  }
]