CVE-2022-49385 — driver: base: fix UAF when driver_attach failed
In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driver_private will be…
Published: 2025-02-26 · CVSS: 7.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driver_private will be freed. But it has been added to the bus, which caused a UAF. To fix it, we need to delete it from the bus when failed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7