Vulnerability in Linux

CVE-2022-50767

In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: Fix several use-after-free bugs Several types of UAFs can occur when physically removing a USB device. Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is kref_put() that finally calls ufx_free(). This fix prevents multiple UAFs.

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 3c8a63e22a0802fd56380f6ab305b419f18eb6f5, 3.2, 0

References