CVE-2022-49388

The Linux kernel is affected by a use-after-free vulnerability in the ubi component, specifically within the ubi_create_volume() function. The issue arises during the error handling path where the eba_tbl pointer is improperly managed; the code attempts to release eba_tbl while it is still being ...

CVE-2022-49388 ubi: ubi_create_volume: Fix use-after-free when volume creation failed

In the Linux kernel, the following vulnerability has been resolved: ubi: ubicreatevolume: Fix use-after-free when volume creation failed There is an use-after-free problem for 'ebatbl' in ubicreatevolume's error handling path: ubiebareplacetablevol, ebatbl vol-ebatbl = tbl outmapping:...