CVE-2022-49711

bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()

In fsl_mc_bus_remove(), mc->root_mc_bus_dev->mc_io is passed to fsl_destroy_mc_io(). However, mc->root_mc_bus_dev is already freed in fsl_mc_device_remove(). Then reference to mc->root_mc_bus_dev->mc_io triggers KASAN use-after-free. To avoid the use-after-free, keep the reference to mc->root_mc_bus_dev->mc_io in a local variable and pass to fsl_destroy_mc_io().

This patch needs rework to apply to kernels older than v5.15.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	f93627146f0e371093966ed3d44c065aa077cfb1 to before 720ab105df7bf3eee62d2bddd41526b29d07d045Affected f93627146f0e371093966ed3d44c065aa077cfb1 to before ccd1751092341ac120a961835211f9f2e3735963Affected f93627146f0e371093966ed3d44c065aa077cfb1 to before 161b68b0a728377aaa10a8e14c70e7734f3c9ff7Affected f93627146f0e371093966ed3d44c065aa077cfb1 to before 928ea98252ad75118950941683893cf904541da9Affected
LinuxLinux	4.8Affected before 4.8Not affected 5.10.248 through 5.10.Not affected 5.15.49 through 5.15.Not affected 5.18.6 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.