CVE-2022-49501

Summary

CVE-2022-49501: A vulnerability in the Linux kernel's usbnet driver has been identified and resolved. A previous commit aimed to fix a use-after-free issue when disconnecting USB Ethernet adapters. However, it was discovered that a different fix was required. The commit in question, 2c9d6c2b871d, changed the order of binding and unbinding, making them asymmetrical. This resulted in the PHY being stopped twice upon disconnection, necessitating a complicated solution in the ->stop() function. Reverting the commit allows for a simpler approach, making the call to phy_stop() unconditional.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.