In the Linux kernel, the following vulnerability has been resolved:
misc: fastrpc: Don't remove map on createrprocess and devicerelease
Do not remove the map from the list on error path in fastrpcinitcreateprocess, instead call fastrpcmapput, to avoid use-after-free. Do not remove it on fastrpcdevicerelease either, call fastrpcmap_put instead.
The fastrpcfreemap is the only proper place to remove the map. This is called only after the reference count is 0.
[
{
"signature_type": "Function",
"digest": {
"function_hash": "3296811521555720080491678265843821364",
"length": 884.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_device_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35ddd482345c43d9eec1f3406c0f20a95ed4054b",
"id": "CVE-2022-48873-09b168f2",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "57051049011687400765570594727153293671",
"length": 2359.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_init_create_process"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5c44e924a571d0ad07054de549624fbc04e4d7",
"id": "CVE-2022-48873-0bfc60c4",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"5818445505619547581314446710884918171",
"121318464465388170369426678780856474176",
"337167062434195658893521211101913018954",
"34350148676696534360702994655907744036",
"1091845463443902484484271649042294781",
"46868670440824955047401383719919729038",
"176486028424515945596913508672143428910",
"302571101300715027607388175858000143294",
"22086084777489441008943773748417132281",
"253352808809922863391723811611480338527",
"316957435153557376839854854027453189223",
"1304161699915973682182861363604168815",
"190600689836077817509867692360146620356",
"222935380801046564595977019053806742961",
"63642675599925677306452950017050468453",
"126640428823908015427470175826631063357",
"28045786335518865233253986754005912035",
"33614535221868009817585896323948835030",
"226221167359861588769475992422754715043"
]
},
"target": {
"file": "drivers/misc/fastrpc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@193cd853145b63e670bd73740250983af1475330",
"id": "CVE-2022-48873-13b8a4e0",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "321526576673068044772616505083026791924",
"length": 2365.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_init_create_process"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@193cd853145b63e670bd73740250983af1475330",
"id": "CVE-2022-48873-16d340d6",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "58142979023109429462438428499614139799",
"length": 2522.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_init_create_process"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35ddd482345c43d9eec1f3406c0f20a95ed4054b",
"id": "CVE-2022-48873-19e4aa21",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "321526576673068044772616505083026791924",
"length": 2365.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_init_create_process"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8",
"id": "CVE-2022-48873-37a90b58",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "40721464082414339017933034370375509821",
"length": 282.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_free_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@193cd853145b63e670bd73740250983af1475330",
"id": "CVE-2022-48873-3fc24115",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"5818445505619547581314446710884918171",
"121318464465388170369426678780856474176",
"337167062434195658893521211101913018954",
"34350148676696534360702994655907744036",
"1091845463443902484484271649042294781",
"46868670440824955047401383719919729038",
"176486028424515945596913508672143428910",
"302571101300715027607388175858000143294",
"22086084777489441008943773748417132281",
"253352808809922863391723811611480338527",
"316957435153557376839854854027453189223",
"1304161699915973682182861363604168815",
"190600689836077817509867692360146620356",
"222935380801046564595977019053806742961",
"63642675599925677306452950017050468453",
"126640428823908015427470175826631063357",
"28045786335518865233253986754005912035",
"33614535221868009817585896323948835030",
"226221167359861588769475992422754715043"
]
},
"target": {
"file": "drivers/misc/fastrpc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bb96c8f9268e2fdb0e5321cbc358ee5941efc15",
"id": "CVE-2022-48873-4768956d",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "37559697297412547451528778610331525645",
"length": 690.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_free_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bb96c8f9268e2fdb0e5321cbc358ee5941efc15",
"id": "CVE-2022-48873-58f7afdf",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "3296811521555720080491678265843821364",
"length": 884.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_device_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bb96c8f9268e2fdb0e5321cbc358ee5941efc15",
"id": "CVE-2022-48873-693ddf66",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "255328032467018799425289374023039187116",
"length": 747.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_device_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5c44e924a571d0ad07054de549624fbc04e4d7",
"id": "CVE-2022-48873-6c06ae7d",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "3296811521555720080491678265843821364",
"length": 884.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_device_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8",
"id": "CVE-2022-48873-769035d1",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"5818445505619547581314446710884918171",
"121318464465388170369426678780856474176",
"337167062434195658893521211101913018954",
"34350148676696534360702994655907744036",
"1091845463443902484484271649042294781",
"46868670440824955047401383719919729038",
"176486028424515945596913508672143428910",
"302571101300715027607388175858000143294",
"22086084777489441008943773748417132281",
"253352808809922863391723811611480338527",
"316957435153557376839854854027453189223",
"1304161699915973682182861363604168815",
"190600689836077817509867692360146620356",
"222935380801046564595977019053806742961",
"63642675599925677306452950017050468453",
"126640428823908015427470175826631063357",
"72633429231122322716150456390054705476",
"23827936124662715388060526788144132169",
"278809671608863121785530828461662825318"
]
},
"target": {
"file": "drivers/misc/fastrpc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5c44e924a571d0ad07054de549624fbc04e4d7",
"id": "CVE-2022-48873-79f39081",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "40721464082414339017933034370375509821",
"length": 282.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_free_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8",
"id": "CVE-2022-48873-b224b560",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"5818445505619547581314446710884918171",
"121318464465388170369426678780856474176",
"337167062434195658893521211101913018954",
"34350148676696534360702994655907744036",
"1091845463443902484484271649042294781",
"46868670440824955047401383719919729038",
"176486028424515945596913508672143428910",
"302571101300715027607388175858000143294",
"22086084777489441008943773748417132281",
"253352808809922863391723811611480338527",
"316957435153557376839854854027453189223",
"1304161699915973682182861363604168815",
"190600689836077817509867692360146620356",
"222935380801046564595977019053806742961",
"63642675599925677306452950017050468453",
"126640428823908015427470175826631063357",
"28045786335518865233253986754005912035",
"33614535221868009817585896323948835030",
"226221167359861588769475992422754715043"
]
},
"target": {
"file": "drivers/misc/fastrpc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35ddd482345c43d9eec1f3406c0f20a95ed4054b",
"id": "CVE-2022-48873-b7ce616c",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"5818445505619547581314446710884918171",
"121318464465388170369426678780856474176",
"337167062434195658893521211101913018954",
"34350148676696534360702994655907744036",
"1091845463443902484484271649042294781",
"46868670440824955047401383719919729038",
"176486028424515945596913508672143428910",
"302571101300715027607388175858000143294",
"22086084777489441008943773748417132281",
"253352808809922863391723811611480338527",
"316957435153557376839854854027453189223",
"1304161699915973682182861363604168815",
"190600689836077817509867692360146620356",
"222935380801046564595977019053806742961",
"63642675599925677306452950017050468453",
"126640428823908015427470175826631063357",
"28045786335518865233253986754005912035",
"33614535221868009817585896323948835030",
"226221167359861588769475992422754715043"
]
},
"target": {
"file": "drivers/misc/fastrpc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b7b7bb400dd13dcb03fc6e591bb7ca4664bbec8",
"id": "CVE-2022-48873-c78c194f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "40721464082414339017933034370375509821",
"length": 282.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_free_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b5c44e924a571d0ad07054de549624fbc04e4d7",
"id": "CVE-2022-48873-ea8cf9e1",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "58142979023109429462438428499614139799",
"length": 2522.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_init_create_process"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bb96c8f9268e2fdb0e5321cbc358ee5941efc15",
"id": "CVE-2022-48873-f3b7aaf5",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "37559697297412547451528778610331525645",
"length": 690.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_free_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35ddd482345c43d9eec1f3406c0f20a95ed4054b",
"id": "CVE-2022-48873-f4156326",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "3296811521555720080491678265843821364",
"length": 884.0
},
"target": {
"file": "drivers/misc/fastrpc.c",
"function": "fastrpc_device_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@193cd853145b63e670bd73740250983af1475330",
"id": "CVE-2022-48873-f4a75eed",
"deprecated": false,
"signature_version": "v1"
}
]