Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2024/10/22 8:9 a.m.14 views

CVE-2022-49029

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-;list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...

6.7CVSS6.8AI score0.00014EPSS
Exploits0References4
CVE
CVE
added 2024/10/21 8:6 p.m.138 views

CVE-2022-49029

CVE-2022-49029 concerns the Linux kernel hwmon IBM PEX driver. If ibmpex_find_sensors() fails during ibmpex_register_bmc(), the data object is freed but data->list is not removed from driver_data.bmc_data, risking a use-after-free. The fixed code removes the entry from driver_data.bmc_data bef...

7.8CVSS7.3AI score0.00014EPSS
Exploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/21 8:6 p.m.19 views

CVE-2022-49029 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...

6.9AI score0.00014EPSS
Exploits0References8
OSV
OSV
added 2024/10/21 8:6 p.m.19 views

CVE-2022-49029 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...

7.8CVSS5.9AI score0.00014EPSS
Exploits0References11
OSV
OSV
added 2023/01/17 4:28 p.m.8 views

GSD-2023-1000344 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.268 by commit...

7.2AI score
Exploits0
Rows per page
Query Builder