CVE-2022-49385

driver: base: fix UAF when driver_attach failed

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

driver: base: fix UAF when driver_attach failed

When driver_attach(drv); failed, the driver_private will be freed. But it has been added to the bus, which caused a UAF.

To fix it, we need to delete it from the bus when failed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	190888ac01d059e38ffe77a2291d44cafa9016fb to before 5d709f58c743166fe1c6914b9de0ae8868600d9bAffected 190888ac01d059e38ffe77a2291d44cafa9016fb to before 823f24f2e329babd0330200d0b74882516fe57f4Affected 190888ac01d059e38ffe77a2291d44cafa9016fb to before cdf1a683a01583bca4b618dd16223cbd6e462e21Affected 190888ac01d059e38ffe77a2291d44cafa9016fb to before 5389101257828d1913d713d9a40acbe14f5961dfAffected 190888ac01d059e38ffe77a2291d44cafa9016fb to before c059665c84feab46b7173d3a1bf36c2fb7f9df86Affected 190888ac01d059e38ffe77a2291d44cafa9016fb to before 310862e574001a97ad02272bac0fd13f75f42a27Affected
LinuxLinux	3.9Affected before 3.9Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

190888ac01d059e38ffe77a2291d44cafa9016fb to before 5d709f58c743166fe1c6914b9de0ae8868600d9bAffected
190888ac01d059e38ffe77a2291d44cafa9016fb to before 823f24f2e329babd0330200d0b74882516fe57f4Affected
190888ac01d059e38ffe77a2291d44cafa9016fb to before cdf1a683a01583bca4b618dd16223cbd6e462e21Affected
190888ac01d059e38ffe77a2291d44cafa9016fb to before 5389101257828d1913d713d9a40acbe14f5961dfAffected
190888ac01d059e38ffe77a2291d44cafa9016fb to before c059665c84feab46b7173d3a1bf36c2fb7f9df86Affected
190888ac01d059e38ffe77a2291d44cafa9016fb to before 310862e574001a97ad02272bac0fd13f75f42a27Affected

LinuxLinux

3.9Affected
before 3.9Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.