CVE-2022-48873

misc: fastrpc: Don't remove map on creater_process and device_release

State: Published
Severity: 7.8 High
Published: Aug 21, 2024
Updated: Aug 5, 2026
Reserved: Jul 16, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Don't remove map on creater_process and device_release

Do not remove the map from the list on error path in fastrpc_init_create_process, instead call fastrpc_map_put, to avoid use-after-free. Do not remove it on fastrpc_device_release either, call fastrpc_map_put instead.

The fastrpc_free_map is the only proper place to remove the map. This is called only after the reference count is 0.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 4b5c44e924a571d0ad07054de549624fbc04e4d7Affected b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 193cd853145b63e670bd73740250983af1475330Affected b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8Affected b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 35ddd482345c43d9eec1f3406c0f20a95ed4054bAffected b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 5bb96c8f9268e2fdb0e5321cbc358ee5941efc15Affected aaf5aa44934ad069cac805923c49f6968b9a0d49Affected 5.1.6 to before 5.2Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.230 through 5.4.Not affected 5.10.165 through 5.10.Not affected 5.15.90 through 5.15.Not affected 6.1.8 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 4b5c44e924a571d0ad07054de549624fbc04e4d7Affected
b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 193cd853145b63e670bd73740250983af1475330Affected
b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8Affected
b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 35ddd482345c43d9eec1f3406c0f20a95ed4054bAffected
b49f6d83e290f17e20f4e5cf31288d3bb4955ea6 to before 5bb96c8f9268e2fdb0e5321cbc358ee5941efc15Affected
aaf5aa44934ad069cac805923c49f6968b9a0d49Affected
5.1.6 to before 5.2Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.230 through 5.4.*Not affected
5.10.165 through 5.10.*Not affected
5.15.90 through 5.15.*Not affected
6.1.8 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.