VYPR
High severity7.8NVD Advisory· Published Aug 21, 2024· Updated Aug 4, 2026

CVE-2022-48874

CVE-2022-48874

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Fix use-after-free and race in fastrpc_map_find

Currently, there is a race window between the point when the mutex is unlocked in fastrpc_map_lookup and the reference count increasing (fastrpc_map_get) in fastrpc_map_find, which can also lead to use-after-free.

So lets merge fastrpc_map_find into fastrpc_map_lookup which allows us to both protect the maps list by also taking the &fl->lock spinlock and the reference count, since the spinlock will be released only after. Add take_ref argument to make this suitable for all callers.

Affected products

4
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.18,<6.1.8
    • (no CPE)range: 5.18
    • (no CPE)
  • osv-coords
    Range: >= 5.18.0, < 6.1.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.