Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use get_device and put_device in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check the buffer before using it in the submit function.
CVSS Score
HIGH
References
- https://git.kernel.org/stable/c/1d5ad0a874ddfcee9f932f54b1d34cbe8b9ddcfe
- https://git.kernel.org/stable/c/3593e8efc9f0dac6be70bd5c964eadaa86bf2713
- https://git.kernel.org/stable/c/d3e1e24604031b0d83b6c2d38f54eeea265cfcc0
FAQ
What is CVE-2022-50785?
CVE-2022-50785 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use get_device and put_device in the open and close functions to make sure the device doesn't get...
How severe is CVE-2022-50785?
CVE-2022-50785 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50785?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.