CVE-2022-49419: video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup Commit b3c9a924aab6 ("fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove") fixed a use-after-free error due the vesafb driver freeing the fb_info in the .remove handler instead of doing it in .fb_destroy. This can happen if the .fb_destroy callback is executed after the .remove callback, since the former tries to access a pointer freed by the latter. But that change didn't take into account that another possible scenario is that .fb_destroy is called before the .remove callback. For example, if no process has the fbdev chardev opened by the time the driver is removed. If that's the case, fb_info will be freed when unregister_framebuffer() is called, making the fb_info pointer accessed in vesafb_remove() after that to no longer be valid. To prevent that, move the expression containing the info->par to happen before the unregister_framebuffer() function call.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Linux Kernel | >=5.15.41<5.15.46 | |
| Linux Kernel | >=5.17.9<5.17.14 | |
| Linux Kernel | >=5.18<5.18.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-49419?
CVE-2022-49419 has not been assigned a specific severity score, but it is classified as a use-after-free vulnerability which can lead to potential system exploitation.
How do I fix CVE-2022-49419?
To fix CVE-2022-49419, update your Linux Kernel to a version that incorporates the patch addressing this vulnerability.
Which versions of the Linux Kernel are affected by CVE-2022-49419?
CVE-2022-49419 affects Linux Kernel versions between 5.15.41 to 5.15.46, 5.17.9 to 5.17.14, and 5.18.0 to 5.18.3.
What component is associated with CVE-2022-49419?
CVE-2022-49419 is associated with the Linux framebuffer device (fbdev) specifically related to the vesafb driver.
What is the potential impact of CVE-2022-49419?
The potential impact of CVE-2022-49419 includes system crashes or exploiting the vulnerability to execute arbitrary code.
- agent/first-publish-date
- agent/type
- agent/title
- agent/references
- agent/source
- agent/author
- agent/description
- agent/severity
- agent/guess-ai
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.15.41
- version/linux kernel/5.17.9
- version/linux kernel/5.18