CVE-2022-50192
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-50192
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50192.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-50192
- Related
- Published
- 2025-06-18T11:15:49Z
- Modified
- 2025-06-18T16:00:24Z
- Downstream
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
spi: tegra20-slink: fix UAF in tegraslinkremove()
After calling spiunregistermaster(), the refcount of master will be decrease to 0, and it will be freed in spicontrollerrelease(), the device data also will be freed, so it will lead a UAF when using 'tspi'. To fix this, get the master before unregister and put it when finish using it.
- References
-
- https://git.kernel.org/stable/c/415b4ce61308f24583912d887772dfcbf97f1d20
- https://git.kernel.org/stable/c/67f77172644260482fdafc03b6025847944701e5
- https://git.kernel.org/stable/c/7e9984d183bb1e99e766c5c2b950ff21f7f7b6c0
- https://git.kernel.org/stable/c/800c7767e05d29656713e04532823a752e57e037
- https://security-tracker.debian.org/tracker/CVE-2022-50192
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source