CVE - CVE-2022-50087

CVE-ID
CVE-2022-50087	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the probe succeeds. If it is not taken care, then it could result use-after-free as the value is exported via get_scpi_ops() and could refer to a memory allocated via devm_kzalloc() but freed when the probe fails.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643 URL:https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643 MISC:https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856 URL:https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856 MISC:https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51 URL:https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51 MISC:https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87 URL:https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87 MISC:https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f URL:https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f MISC:https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85 URL:https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85 MISC:https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562 URL:https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562
Assigning CNA
kernel.org
Date Record Created
20250618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)