Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48782
HistoryJul 16, 2024 - 11:13 a.m.

CVE-2022-48782 mctp: fix use after free

2024-07-1611:13:19
Linux
github.com
1
linux kernel
fix use after free
mctp
clang static analysis

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

mctp: fix use after free

Clang static analysis reports this problem
route.c:425:4: warning: Use of memory after it is freed
trace_mctp_key_acquire(key);
^~~~~~~~~~~~~~~~~~~~~~~~~~~
When mctp_key_add() fails, key is freed but then is later
used in trace_mctp_key_acquire(). Add an else statement
to use the key only when mctp_key_add() is successful.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2022-48782