CVE-2022-50087

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50087
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the probe succeeds. If it is not taken care, then it could result use-after-free as the value is exported via get_scpi_ops() and could refer to a memory allocated via devm_kzalloc() but freed when the probe fails.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643 Patch
https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856 Patch
https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51 Patch
https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87 Patch
https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f Patch
https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85 Patch
https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 02:21

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: arm_scpi: Asegurarse de que scpi_info no se asigne si la sonda falla. Cuando la sonda scpi falla, en cualquier momento, debemos asegurarnos de que scpi_info no esté configurado y permanezca nulo hasta que la sonda tenga éxito. Si no se soluciona, podría producirse un error de Use-After-Free, ya que el valor se exporta mediante get_scpi_ops() y podría hacer referencia a una memoria asignada mediante devm_kzalloc(), pero liberada cuando la sonda falla.
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-416
References () https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643 - () https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643 - Patch
References () https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856 - () https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856 - Patch
References () https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51 - () https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51 - Patch
References () https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87 - () https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87 - Patch
References () https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f - () https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f - Patch
References () https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85 - () https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85 - Patch
References () https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562 - () https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562 - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 02:21

NVD link : CVE-2022-50087

Mitre link : CVE-2022-50087

CVE.ORG link : CVE-2022-50087

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free