CVE-2022-48735

CVE-2022-48735 concerns a use‑after‑free in the Linux kernel ALSA hda LED class devices created by HD‑audio codec drivers. The issue arises because LED class devices are registered via devm_led_classdev_register() and tied to the codec device, but the devres release can execute before the devm ch...

PT-2022-28846

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue is related to a use-after-free UAF flaw in the leds class devs at unbinding. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...