CVE - CVE-2022-48787

CVE-ID
CVE-2022-48787	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all (or, presumably, all of the firmware files failed to parse), we end up unbinding by calling device_release_driver(), which calls remove(), which then in iwlwifi calls iwl_drv_stop(), freeing the 'drv' struct. However the new code I added will still erroneously access it after it was freed. Set 'failure=false' in this case to avoid the access, all data was already freed anyway.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/008508c16af0087cda0394e1ac6f0493b01b6063 URL:https://git.kernel.org/stable/c/008508c16af0087cda0394e1ac6f0493b01b6063 MISC:https://git.kernel.org/stable/c/494de920d98f125b099f27a2d274850750aff957 URL:https://git.kernel.org/stable/c/494de920d98f125b099f27a2d274850750aff957 MISC:https://git.kernel.org/stable/c/7d6475179b85a83186ccce59cdc359d4f07d0bcb URL:https://git.kernel.org/stable/c/7d6475179b85a83186ccce59cdc359d4f07d0bcb MISC:https://git.kernel.org/stable/c/9958b9cbb22145295ee1ffaea0904c383da2c05d URL:https://git.kernel.org/stable/c/9958b9cbb22145295ee1ffaea0904c383da2c05d MISC:https://git.kernel.org/stable/c/bea2662e7818e15d7607d17d57912ac984275d94 URL:https://git.kernel.org/stable/c/bea2662e7818e15d7607d17d57912ac984275d94 MISC:https://git.kernel.org/stable/c/d3b98fe36f8a06ce654049540773256ab59cb53d URL:https://git.kernel.org/stable/c/d3b98fe36f8a06ce654049540773256ab59cb53d MISC:https://git.kernel.org/stable/c/ddd46059f7d99119b62d44c519df7a79f2e6a515 URL:https://git.kernel.org/stable/c/ddd46059f7d99119b62d44c519df7a79f2e6a515
Assigning CNA
kernel.org
Date Record Created
20240716	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240716)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)