In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix error code path in acpi_ds_call_control_method()
A use-after-free in acpi_ps_parse_aml() after a failing invocaion of
acpi_ds_call_control_method() is reported by KASAN [1] and code
inspection reveals that next_walk_state pushed to the thread by
acpi_ds_create_walk_state() is freed on errors, but it is not popped
from the thread beforehand. Thus acpi_ds_get_current_walk_state()
called by acpi_ps_parse_aml() subsequently returns it as the new
walk state which is incorrect.
To address this, make acpi_ds_call_control_method() call
acpi_ds_pop_walk_state() to pop next_walk_state from the thread before
returning an error.
References
Configurations
Configuration 1 (hide)
|
History
12 Dec 2025, 17:05
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/0462fec709d51762ba486245bc344f44cc6cfa97 - Patch | |
| References | () https://git.kernel.org/stable/c/2deb42c4f9776e59bee247c14af9c5e8c05ca9a6 - Patch | |
| References | () https://git.kernel.org/stable/c/38e251d356a01b61a86cb35213cafd7e8fe7090c - Patch | |
| References | () https://git.kernel.org/stable/c/404ec60438add1afadaffaed34bb5fe4ddcadd40 - Patch | |
| References | () https://git.kernel.org/stable/c/5777432ebaaf797e24f059979b42df3139967163 - Patch | |
| References | () https://git.kernel.org/stable/c/799881db3e03b5e98fe6a900d9d7de8c7d61e7ee - Patch | |
| References | () https://git.kernel.org/stable/c/9ef353c92f9d04c88de3af1a46859c1fb76db0f8 - Patch | |
| References | () https://git.kernel.org/stable/c/b0b83d3f3ffa96e8395c56b83d6197e184902a34 - Patch | |
| References | () https://git.kernel.org/stable/c/f520d181477ec29a496c0b3bbfbdb7e2606c2713 - Patch |
18 Sep 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-18 16:15
Updated : 2025-12-12 17:05
NVD link : CVE-2022-50411
Mitre link : CVE-2022-50411
CVE.ORG link : CVE-2022-50411
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free