CVE-2022-49029
21.10.2024, 20:15
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: '&data->list' not removed from list If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will be freed, but data->list will not be removed from driver_data.bmc_data, then list traversal may cause UAF. Fix by removeing it from driver_data.bmc_data before free().Enginsight
Vendor | Product | Version |
---|---|---|
linux | linux_kernel | 2.6.24 ≤ 𝑥 < 4.9.335 |
linux | linux_kernel | 4.10 ≤ 𝑥 < 4.14.301 |
linux | linux_kernel | 4.15 ≤ 𝑥 < 4.19.268 |
linux | linux_kernel | 4.20 ≤ 𝑥 < 5.4.226 |
linux | linux_kernel | 5.5 ≤ 𝑥 < 5.10.158 |
linux | linux_kernel | 5.11 ≤ 𝑥 < 5.15.82 |
linux | linux_kernel | 5.16 ≤ 𝑥 < 6.0.12 |
linux | linux_kernel | 6.1:rc1 |
linux | linux_kernel | 6.1:rc2 |
linux | linux_kernel | 6.1:rc3 |
linux | linux_kernel | 6.1:rc4 |
linux | linux_kernel | 6.1:rc5 |
linux | linux_kernel | 6.1:rc6 |
linux | linux_kernel | 6.1:rc7 |
𝑥
= Vulnerable software versions

Debian Releases
Common Weakness Enumeration
References