In the Linux kernel, the following vulnerability has been resolved:
ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()
sof_es8336_remove() calls cancel_delayed_work(). However, that
function does not wait until the work function finishes. This
means that the callback function may still be running after
the driver's remove function has finished, which would result
in a use-after-free.
Fix by calling cancel_delayed_work_sync(), which ensures that
the work is properly cancelled, no longer running, and unable
to re-schedule itself.
References
Configurations
Configuration 1 (hide)
|
History
04 Dec 2025, 15:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/1b41beaa7a58467505ec3023af8aad74f878b888 - Patch | |
| References | () https://git.kernel.org/stable/c/390a1a98288a53b2e7555097d83c6e55d579b166 - Patch | |
| References | () https://git.kernel.org/stable/c/b85102a3aa3810a09eb55692e8cd6ffbb304e57d - Patch | |
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Linux
Linux linux Kernel |
15 Sep 2025, 15:22
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-15 15:15
Updated : 2025-12-04 15:31
NVD link : CVE-2022-50305
Mitre link : CVE-2022-50305
CVE.ORG link : CVE-2022-50305
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free