CVE-2022-49029: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpexregisterbmc() fails
Smatch report warning as follows:
drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc() warn: '&data->list' not removed from list
If ibmpexfindsensors() fails in ibmpexregisterbmc(), data will be freed, but data->list will not be removed from driverdata.bmcdata, then list traversal may cause UAF.
Fix by removeing it from driverdata.bmcdata before free().
Other sources
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (ibmpex) Fix possible UAF when ibmpexregisterbmc() fails
Smatch report warning as follows:
drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc() warn: '&data->list' not removed from list
If ibmpexfindsensors() fails in ibmpexregisterbmc(), data will be freed, but data->list will not be removed from driverdata.bmcdata, then list traversal may cause UAF.
Fix by removeing it from driverdata.bmcdata before free().
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In ibmpex_register_bmc(), if ibmpex_register_bmc() fails, remove '&data->list' (i.e., data->list) from driver_data.bmc_data before calling free(), to prevent list traversal after free/UAF.
Linux kernel drivers/hwmon/ibmpex.c Remove data->list from driver_data.bmc_data before free() = N/A
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49029?
CVE-2022-49029 has been classified with a severity level dependent on the specific Linux kernel version in use.
How do I fix CVE-2022-49029?
To address CVE-2022-49029, users should upgrade to a patched version of the Linux kernel that resolves the vulnerability.
Which Linux kernel versions are affected by CVE-2022-49029?
CVE-2022-49029 affects multiple versions of the Linux kernel, specifically from 2.6.24 up to the latest 6.1 release candidates.
Is CVE-2022-49029 a remote exploit?
CVE-2022-49029 can potentially be exploited locally by an attacker with the appropriate privileges.
What component of the Linux kernel does CVE-2022-49029 affect?
CVE-2022-49029 specifically affects the hwmon subsystem related to ibmpex.