CVE-2022-49455

misc: ocxl: fix possible double free in ocxl_file_register_afu

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: ocxl: fix possible double free in ocxl_file_register_afu

info_release() will be called in device_unregister() when info->dev's reference count is 0. So there is no need to call ocxl_afu_put() and kfree() again.

Fix this by adding free_minor() and return to err_unregister error path.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-415 Double Free

Affected Products

Product	Versions
LinuxLinux	75ca758adbafc81804c39b2c200ecdc819a6c042 to before de65c32ace9aa70d51facc61ba986607075e3a25Affected 75ca758adbafc81804c39b2c200ecdc819a6c042 to before ee89d8dee55ab4b3b8ad8b70866b2841ba334767Affected 75ca758adbafc81804c39b2c200ecdc819a6c042 to before 8fb674216835e1f0c143762696d645facebb4685Affected 75ca758adbafc81804c39b2c200ecdc819a6c042 to before 252768d32e92c1214aeebb5fec0844ca479bcf5cAffected 75ca758adbafc81804c39b2c200ecdc819a6c042 to before 9e9087cf34ee69f4e95d146ac29385d6e367a97bAffected 75ca758adbafc81804c39b2c200ecdc819a6c042 to before 950cf957fe34d40d63dfa3bf3968210430b6491eAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

75ca758adbafc81804c39b2c200ecdc819a6c042 to before de65c32ace9aa70d51facc61ba986607075e3a25Affected
75ca758adbafc81804c39b2c200ecdc819a6c042 to before ee89d8dee55ab4b3b8ad8b70866b2841ba334767Affected
75ca758adbafc81804c39b2c200ecdc819a6c042 to before 8fb674216835e1f0c143762696d645facebb4685Affected
75ca758adbafc81804c39b2c200ecdc819a6c042 to before 252768d32e92c1214aeebb5fec0844ca479bcf5cAffected
75ca758adbafc81804c39b2c200ecdc819a6c042 to before 9e9087cf34ee69f4e95d146ac29385d6e367a97bAffected
75ca758adbafc81804c39b2c200ecdc819a6c042 to before 950cf957fe34d40d63dfa3bf3968210430b6491eAffected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.