CVE-2022-49724

Katalog CVE

CVSS 7.8 · High EPSS 0,28%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to free_irq() to fix this splat when the driver is unbound: WARNING: CPU: 0 PID: 30 at kernel/irq/manage.c:1895 free_irq Trying to free already-free IRQ 65 Call Trace: warn_slowpath_fmt free_irq goldfish_tty_remove platform_remove device_remove device_release_driver_internal device_driver_detach unbind_store drv_attr_store ...

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/499e13aac6c762e1e828172b0f0f5275651d6512 patch
• https://git.kernel.org/stable/c/65ca4db68b6819244df9024aea4be55edf8af1ef patch
• https://git.kernel.org/stable/c/a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8 patch
• https://git.kernel.org/stable/c/c4b0b8edccb0cfb15a8cecf4161e0571d3daac64 patch
• https://git.kernel.org/stable/c/c83a1d40dc624070a203eb383ef9fb60eb634136 patch
• https://git.kernel.org/stable/c/f7183c76d500324b8b5bd0af5e663cfa57b7b836 patch
• https://git.kernel.org/stable/c/fb15e79cacddfbc62264e6e807bde50ad688e988 patch