Riskcovery

CVE-2022-49258

crypto: ccree - Fix use after free in cc_cipher_exit()

State
Published
Severity
7.8 High
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccree - Fix use after free in cc_cipher_exit()

kfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But ctx_p->user.key is still used in the next line, which will lead to a use after free.

We can call kfree_sensitive() after dev_dbg() to avoid the uaf.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 63ee04c8b491ee148489347e7da9fbfd982ca2bb to before c93017c8d5ebf55a4e453ac7c84cc84cf92ab570Affected
  • 63ee04c8b491ee148489347e7da9fbfd982ca2bb to before 335bf1fc74f775a8255257aa3e33763f2257b676Affected
  • 63ee04c8b491ee148489347e7da9fbfd982ca2bb to before 25c358efee5153dfd240d4e0d3169d5bebe9cacdAffected
  • 63ee04c8b491ee148489347e7da9fbfd982ca2bb to before cffb5382bd8d3cf21b874ab5b84bf7618932286bAffected
  • 63ee04c8b491ee148489347e7da9fbfd982ca2bb to before 3d950c34074ed74d2713c3856ba01264523289e6Affected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 5.10.110 through 5.10.*Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.