In the Linux kernel, the following vulnerability has been resolved:
moxart: fix potential use-after-free on remove path
It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference.
[
{
"id": "CVE-2022-48626-2b637cd7",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 563.0,
"function_hash": "43737686455789693594331792465609042433"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd2db32e7c3e35bd4d9b8bbff689434a50893546",
"deprecated": false
},
{
"id": "CVE-2022-48626-42b42e1b",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 563.0,
"function_hash": "43737686455789693594331792465609042433"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f901d53f120d1921f84f7b9b118e87e94b403c5",
"deprecated": false
},
{
"id": "CVE-2022-48626-556fab1d",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"139053391746783609180064012321906380434",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"178841022402835825972691139525584004226",
"248608555987519144454244477233835021306",
"140061941570937767696704547130581663363"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af0e6c49438b1596e4be8a267d218a0c88a42323",
"deprecated": false
},
{
"id": "CVE-2022-48626-5824159e",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"126723417388245779142329171664193058270",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"121591070839561111375907910504348932635",
"231018974894944956633524188218685864442",
"174223397158003346557257147926034025833"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c25d5ff1856b91bd4365e813f566cb59aaa9552",
"deprecated": false
},
{
"id": "CVE-2022-48626-5cfcbfc4",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"139053391746783609180064012321906380434",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"178841022402835825972691139525584004226",
"248608555987519144454244477233835021306",
"140061941570937767696704547130581663363"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd2db32e7c3e35bd4d9b8bbff689434a50893546",
"deprecated": false
},
{
"id": "CVE-2022-48626-60a18c8d",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"126723417388245779142329171664193058270",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"121591070839561111375907910504348932635",
"231018974894944956633524188218685864442",
"174223397158003346557257147926034025833"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a0a7ec5574b510b067cfc734b8bdb6564b31d4e",
"deprecated": false
},
{
"id": "CVE-2022-48626-92e04e32",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 578.0,
"function_hash": "111999148725115648463114602631492905015"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f5dc193167591e88797262ec78515a0cbe79ff5f",
"deprecated": false
},
{
"id": "CVE-2022-48626-948bca3d",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"126723417388245779142329171664193058270",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"121591070839561111375907910504348932635",
"231018974894944956633524188218685864442",
"174223397158003346557257147926034025833"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f5dc193167591e88797262ec78515a0cbe79ff5f",
"deprecated": false
},
{
"id": "CVE-2022-48626-97a9cf5b",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 563.0,
"function_hash": "43737686455789693594331792465609042433"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be93028d306dac9f5b59ebebd9ec7abcfc69c156",
"deprecated": false
},
{
"id": "CVE-2022-48626-98976a28",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"126723417388245779142329171664193058270",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"121591070839561111375907910504348932635",
"231018974894944956633524188218685864442",
"174223397158003346557257147926034025833"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e",
"deprecated": false
},
{
"id": "CVE-2022-48626-9ce40221",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 578.0,
"function_hash": "111999148725115648463114602631492905015"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a0a7ec5574b510b067cfc734b8bdb6564b31d4e",
"deprecated": false
},
{
"id": "CVE-2022-48626-b489e49d",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 578.0,
"function_hash": "111999148725115648463114602631492905015"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6f580d0b3349646d4ee1ce0057eb273e8fb7e2e",
"deprecated": false
},
{
"id": "CVE-2022-48626-b7258c6a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 563.0,
"function_hash": "43737686455789693594331792465609042433"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af0e6c49438b1596e4be8a267d218a0c88a42323",
"deprecated": false
},
{
"id": "CVE-2022-48626-df2231a4",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"139053391746783609180064012321906380434",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"178841022402835825972691139525584004226",
"248608555987519144454244477233835021306",
"140061941570937767696704547130581663363"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be93028d306dac9f5b59ebebd9ec7abcfc69c156",
"deprecated": false
},
{
"id": "CVE-2022-48626-e81b1fde",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 578.0,
"function_hash": "111999148725115648463114602631492905015"
},
"target": {
"function": "moxart_remove",
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9c25d5ff1856b91bd4365e813f566cb59aaa9552",
"deprecated": false
},
{
"id": "CVE-2022-48626-f44ae50d",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"139053391746783609180064012321906380434",
"236076148924281997694803013340094277186",
"104735735760409015169522021313898127827",
"26618380492931922092816993884691304746",
"245303877904194982436106934888204729652",
"178841022402835825972691139525584004226",
"248608555987519144454244477233835021306",
"140061941570937767696704547130581663363"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/host/moxart-mmc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f901d53f120d1921f84f7b9b118e87e94b403c5",
"deprecated": false
}
]