In the Linux kernel, the following vulnerability has been resolved:
driver: base: fix UAF when driver_attach failed
When driverattach(drv); failed, the driverprivate will be freed. But it has been added to the bus, which caused a UAF.
To fix it, we need to delete it from the bus when failed.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@310862e574001a97ad02272bac0fd13f75f42a27",
"id": "CVE-2022-49385-226fb814",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "bus_add_driver",
"file": "drivers/base/bus.c"
},
"digest": {
"length": 1377.0,
"function_hash": "36673164958380008696110644393467762320"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c059665c84feab46b7173d3a1bf36c2fb7f9df86",
"id": "CVE-2022-49385-344abba9",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "bus_add_driver",
"file": "drivers/base/bus.c"
},
"digest": {
"length": 1377.0,
"function_hash": "36673164958380008696110644393467762320"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdf1a683a01583bca4b618dd16223cbd6e462e21",
"id": "CVE-2022-49385-4053f426",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327987375849689031151868633449370694097",
"213623978655635732668177267765431160819",
"103839414162176944278687227920046689432",
"615974449157035774190972549683320216",
"104685737738737009761824696329202596132",
"331880356718413952954927562715455654917",
"315574872116629511935214659096963708737"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d709f58c743166fe1c6914b9de0ae8868600d9b",
"id": "CVE-2022-49385-606667ad",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327987375849689031151868633449370694097",
"213623978655635732668177267765431160819",
"103839414162176944278687227920046689432",
"615974449157035774190972549683320216",
"104685737738737009761824696329202596132",
"331880356718413952954927562715455654917",
"315574872116629511935214659096963708737"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@823f24f2e329babd0330200d0b74882516fe57f4",
"id": "CVE-2022-49385-682b9d94",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327987375849689031151868633449370694097",
"213623978655635732668177267765431160819",
"103839414162176944278687227920046689432",
"615974449157035774190972549683320216",
"104685737738737009761824696329202596132",
"331880356718413952954927562715455654917",
"315574872116629511935214659096963708737"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d709f58c743166fe1c6914b9de0ae8868600d9b",
"id": "CVE-2022-49385-7c690fde",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "bus_add_driver",
"file": "drivers/base/bus.c"
},
"digest": {
"length": 1380.0,
"function_hash": "180513505082147658931151613681943051342"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdf1a683a01583bca4b618dd16223cbd6e462e21",
"id": "CVE-2022-49385-97997cbf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "bus_add_driver",
"file": "drivers/base/bus.c"
},
"digest": {
"length": 1377.0,
"function_hash": "36673164958380008696110644393467762320"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c059665c84feab46b7173d3a1bf36c2fb7f9df86",
"id": "CVE-2022-49385-c02cbe02",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327987375849689031151868633449370694097",
"213623978655635732668177267765431160819",
"103839414162176944278687227920046689432",
"615974449157035774190972549683320216",
"104685737738737009761824696329202596132",
"331880356718413952954927562715455654917",
"315574872116629511935214659096963708737"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5389101257828d1913d713d9a40acbe14f5961df",
"id": "CVE-2022-49385-d8606011",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327987375849689031151868633449370694097",
"213623978655635732668177267765431160819",
"103839414162176944278687227920046689432",
"615974449157035774190972549683320216",
"104685737738737009761824696329202596132",
"331880356718413952954927562715455654917",
"315574872116629511935214659096963708737"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5389101257828d1913d713d9a40acbe14f5961df",
"id": "CVE-2022-49385-dd1b3713",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "bus_add_driver",
"file": "drivers/base/bus.c"
},
"digest": {
"length": 1377.0,
"function_hash": "36673164958380008696110644393467762320"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@310862e574001a97ad02272bac0fd13f75f42a27",
"id": "CVE-2022-49385-e9079b64",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/base/bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327987375849689031151868633449370694097",
"213623978655635732668177267765431160819",
"103839414162176944278687227920046689432",
"615974449157035774190972549683320216",
"104685737738737009761824696329202596132",
"331880356718413952954927562715455654917",
"315574872116629511935214659096963708737"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@823f24f2e329babd0330200d0b74882516fe57f4",
"id": "CVE-2022-49385-fdf60ac7",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "bus_add_driver",
"file": "drivers/base/bus.c"
},
"digest": {
"length": 1380.0,
"function_hash": "180513505082147658931151613681943051342"
},
"signature_type": "Function"
}
]