CVE-2022-24958

kernel: use-after-free in dev->buf release in drivers/usb/gadget/legacy/inode.c

Published Feb 11, 2022 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3065-1 linux security update
EUVD EUVD EUVD-2022-29710 drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
Ubuntu USN Ubuntu USN USN-5381-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5418-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5467-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5468-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5505-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5513-1 Linux kernel (AWS) vulnerabilities
History

No history.