CVE-2022-50481: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
In the Linux kernel, the following vulnerability has been resolved:
cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter()
If deviceregister() fails in cxlregisterafu|adapter(), the device is not added, deviceunregister() can not be called in the error path, otherwise it will cause a null-ptr-deref because of removing not added device.
As comment of deviceregister() says, it should use putdevice() to give up the reference in the error path. So split deviceunregister() into devicedel() and putdevice(), then goes to put dev when register fails.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50481?
CVE-2022-50481 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50481?
To fix CVE-2022-50481, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What components are affected by CVE-2022-50481?
CVE-2022-50481 specifically affects the CXL (Compute Express Link) support in the Linux kernel.
Is CVE-2022-50481 a remote vulnerability?
CVE-2022-50481 is not classified as a remote vulnerability; it pertains to local functionality in the kernel.
What impact does CVE-2022-50481 have on system security?
CVE-2022-50481 could lead to kernel crashes or instability when certain conditions are met, potentially affecting system reliability.