Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48854
HistoryJul 16, 2024 - 12:25 p.m.

CVE-2022-48854 net: arc_emac: Fix use after free in arc_mdio_probe()

2024-07-1612:25:20
Linux
github.com
cve-2022-48854
net
arc_emac
fix use after free
arc_mdio_probe
linux kernel
vulnerability

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: arc_emac: Fix use after free in arc_mdio_probe()

If bus->state is equal to MDIOBUS_ALLOCATED, mdiobus_free(bus) will free
the “bus”. But bus->name is still used in the next line, which will lead
to a use after free.

We can fix it by putting the name in a local variable and make the
bus->name point to the rodata section “name”,then use the name in the
error message without referring to bus to avoid the uaf.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2022-48854