Riskcovery

CVE-2022-49951

firmware_loader: Fix use-after-free during unregister

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware_loader: Fix use-after-free during unregister

In the following code within firmware_upload_unregister(), the call to device_unregister() could result in the dev_release function freeing the fw_upload_priv structure before it is dereferenced for the call to module_put(). This bug was found by the kernel test robot using CONFIG_KASAN while running the firmware selftests.

device_unregister(&fw_sysfs->dev); module_put(fw_upload_priv->module);

The problem is fixed by copying fw_upload_priv->module to a local variable for use when calling device_unregister().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 97730bbb242cde22b7140acd202ffd88823886c9 to before d380d40930a674c520a5b55f3be1eb17dc634ebcAffected
  • 97730bbb242cde22b7140acd202ffd88823886c9 to before 8b40c38e37492b5bdf8e95b46b5cca9517a9957aAffected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 5.19.8 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.