Riskcovery

CVE-2022-48670

peci: cpu: Fix use-after-free in adev_release()

State
Published
Severity
7.8 High
Published
May 3, 2024
Updated
Aug 12, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

peci: cpu: Fix use-after-free in adev_release()

When auxiliary_device_add() returns an error, auxiliary_device_uninit() is called, which causes refcount for device to be decremented and .release callback will be triggered.

Because adev_release() re-calls auxiliary_device_uninit(), it will cause use-after-free: [ 1269.455172] WARNING: CPU: 0 PID: 14267 at lib/refcount.c:28 refcount_warn_saturate+0x110/0x15 [ 1269.464007] refcount_t: underflow; use-after-free.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 93e1821c80f9460c8931dc4bc090ede794f966cd to before c87f1f99e26ea4ae08cabe753ae98e5626bdba89Affected
  • 93e1821c80f9460c8931dc4bc090ede794f966cd to before 1c11289b34ab67ed080bbe0f1855c4938362d9cfAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 5.19.10 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.