CVE - CVE-2022-49388

CVE-ID
CVE-2022-49388	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_create_volume: Fix use-after-free when volume creation failed There is an use-after-free problem for 'eba_tbl' in ubi_create_volume()'s error handling path: ubi_eba_replace_table(vol, eba_tbl) vol->eba_tbl = tbl out_mapping: ubi_eba_destroy_table(eba_tbl) // Free 'eba_tbl' out_unlock: put_device(&vol->dev) vol_release kfree(tbl->entries) // UAF Fix it by removing redundant 'eba_tbl' releasing. Fetch a reproducer in [Link].
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217 URL:https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217 MISC:https://git.kernel.org/stable/c/25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9 URL:https://git.kernel.org/stable/c/25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9 MISC:https://git.kernel.org/stable/c/5ff2514e4fb55dcf3d88294686040ca73ea0c1a2 URL:https://git.kernel.org/stable/c/5ff2514e4fb55dcf3d88294686040ca73ea0c1a2 MISC:https://git.kernel.org/stable/c/6d8d3f68cbecfd31925796f0fb668eb21ab06734 URL:https://git.kernel.org/stable/c/6d8d3f68cbecfd31925796f0fb668eb21ab06734 MISC:https://git.kernel.org/stable/c/8302620aeb940f386817321d272b12411ae7d39f URL:https://git.kernel.org/stable/c/8302620aeb940f386817321d272b12411ae7d39f MISC:https://git.kernel.org/stable/c/8c03a1c21d72210f81cb369cc528e3fde4b45411 URL:https://git.kernel.org/stable/c/8c03a1c21d72210f81cb369cc528e3fde4b45411 MISC:https://git.kernel.org/stable/c/abb67043060f2bf4c03d7c3debb9ae980e2b6db3 URL:https://git.kernel.org/stable/c/abb67043060f2bf4c03d7c3debb9ae980e2b6db3 MISC:https://git.kernel.org/stable/c/e27ecf325e51abd06aaefba57a6322a46fa4178b URL:https://git.kernel.org/stable/c/e27ecf325e51abd06aaefba57a6322a46fa4178b
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)