CVE-2022-49258
26.02.2025, 07:01
In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - Fix use after free in cc_cipher_exit() kfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But ctx_p->user.key is still used in the next line, which will lead to a use after free. We can call kfree_sensitive() after dev_dbg() to avoid the uaf.Enginsight
Vendor | Product | Version |
---|---|---|
linux | linux_kernel | 4.17 ≤ 𝑥 < 5.10.110 |
linux | linux_kernel | 5.11 ≤ 𝑥 < 5.15.33 |
linux | linux_kernel | 5.16 ≤ 𝑥 < 5.16.19 |
linux | linux_kernel | 5.17 ≤ 𝑥 < 5.17.2 |
𝑥
= Vulnerable software versions

Debian Releases
Common Weakness Enumeration
References