CVE-2022-49505

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 26, 2025
Updated: Feb 27, 2025
CWE ID 416

Summary

CVE-2022-49505: A vulnerability in the Linux kernel, specifically in the NFC subsystem, has been identified. The issue arises due to the assumption that the device is registered before rfkill is unregistered, leading to a use-after-free scenario. This vulnerability can result in a kernel crash as demonstrated in the provided trace. The crash occurs in the __lock_acquire function, and affected components include nfc_dev_up and rfkill_blocked.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share