Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48787
HistoryJul 16, 2024 - 11:43 a.m.

CVE-2022-48787 iwlwifi: fix use-after-free

2024-07-1611:43:44
Linux
github.com
iwlwifi
use-after-free
linux kernel

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

iwlwifi: fix use-after-free

If no firmware was present at all (or, presumably, all of the
firmware files failed to parse), we end up unbinding by calling
device_release_driver(), which calls remove(), which then in
iwlwifi calls iwl_drv_stop(), freeing the ‘drv’ struct. However
the new code I added will still erroneously access it after it
was freed.

Set ‘failure=false’ in this case to avoid the access, all data
was already freed anyway.

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial