← Back to CVE List
CVE-2022-49385
In the Linux kernel, the following vulnerability has been resolved:
driver: base: fix UAF when driver_attach failed
When driver_attach(drv); failed, the driver_private will be freed.
But it has been added to the bus, which caused a UAF.
To fix it, we need to delete it from the bus when failed.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt