CVE-2022-49724

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49724
In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to free_irq() to fix this splat when the driver is unbound: WARNING: CPU: 0 PID: 30 at kernel/irq/manage.c:1895 free_irq Trying to free already-free IRQ 65 Call Trace: warn_slowpath_fmt free_irq goldfish_tty_remove platform_remove device_remove device_release_driver_internal device_driver_detach unbind_store drv_attr_store ...

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/499e13aac6c762e1e828172b0f0f5275651d6512 Patch
https://git.kernel.org/stable/c/65ca4db68b6819244df9024aea4be55edf8af1ef Patch
https://git.kernel.org/stable/c/a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8 Patch
https://git.kernel.org/stable/c/c4b0b8edccb0cfb15a8cecf4161e0571d3daac64 Patch
https://git.kernel.org/stable/c/c83a1d40dc624070a203eb383ef9fb60eb634136 Patch
https://git.kernel.org/stable/c/f7183c76d500324b8b5bd0af5e663cfa57b7b836 Patch
https://git.kernel.org/stable/c/fb15e79cacddfbc62264e6e807bde50ad688e988 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
History

24 Oct 2025, 18:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/499e13aac6c762e1e828172b0f0f5275651d6512 - () https://git.kernel.org/stable/c/499e13aac6c762e1e828172b0f0f5275651d6512 - Patch
References () https://git.kernel.org/stable/c/65ca4db68b6819244df9024aea4be55edf8af1ef - () https://git.kernel.org/stable/c/65ca4db68b6819244df9024aea4be55edf8af1ef - Patch
References () https://git.kernel.org/stable/c/a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8 - () https://git.kernel.org/stable/c/a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8 - Patch
References () https://git.kernel.org/stable/c/c4b0b8edccb0cfb15a8cecf4161e0571d3daac64 - () https://git.kernel.org/stable/c/c4b0b8edccb0cfb15a8cecf4161e0571d3daac64 - Patch
References () https://git.kernel.org/stable/c/c83a1d40dc624070a203eb383ef9fb60eb634136 - () https://git.kernel.org/stable/c/c83a1d40dc624070a203eb383ef9fb60eb634136 - Patch
References () https://git.kernel.org/stable/c/f7183c76d500324b8b5bd0af5e663cfa57b7b836 - () https://git.kernel.org/stable/c/f7183c76d500324b8b5bd0af5e663cfa57b7b836 - Patch
References () https://git.kernel.org/stable/c/fb15e79cacddfbc62264e6e807bde50ad688e988 - () https://git.kernel.org/stable/c/fb15e79cacddfbc62264e6e807bde50ad688e988 - Patch
First Time Linux
Linux linux Kernel
CWE CWE-416
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: goldfish: Arreglar free_irq() al eliminar Pase el dev_id correcto a free_irq() para corregir este error cuando el controlador no está vinculado: ADVERTENCIA: CPU: 0 PID: 30 en kernel/irq/manage.c:1895 free_irq Intentando liberar una IRQ 65 que ya está libre Seguimiento de llamadas: warn_slowpath_fmt free_irq goldfish_tty_remove platform_remove device_remove device_release_driver_internal device_driver_detach unbind_store drv_attr_store ...

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-24 18:56

NVD link : CVE-2022-49724

Mitre link : CVE-2022-49724

CVE.ORG link : CVE-2022-49724

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free