CVE-2022-49419

Summary

CVE-2022-49419 is a vulnerability affecting the Linux kernel's vesafb driver in the video subsystem. The issue arises from an improper handling of the fb_info structure during driver removal. The original commit attempted to address a use-after-free error by moving the cleanup of fb_info from the .remove handler to the .fb_destroy handler. However, this change did not consider the possibility of .fb_destroy being called before .remove. In such cases, the fb_info pointer would be freed before being accessed in vesafb_remove(), leading to a use-after-free condition. To mitigate this, the expression containing the info->par should be executed before the unregister_framebuffer() function call.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.