CVE-2022-49287

Summary

CVE-2022-49287 affects the Linux kernel, specifically the tpm driver. A use-after-free vulnerability occurs due to a sequence of operations involving opening the /dev/tpmrm device, removing the tpm_tis_spi module, and writing a TPM command. This results in a refcount warning and potential CPU crash. The cause is an attempt to get a reference to the chip's device in tpm_common_write() when the reference counter is already zero. The fix involves moving TPM 2 character device handling to a later point in time and releasing the extra reference in tpm_chip_unregister().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.