CVE-2022-49524

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 26, 2025
Updated: Feb 27, 2025
CWE ID 416

Summary

CVE-2022-49524 is a vulnerability affecting the Linux kernel's cx23885 driver. The issue arises from an error in the error handling of the cx23885_initdev() function. When the driver fails to set the DMA mask, it does not release i2c-related resources, leading to a use-after-free error. This vulnerability can result in a kernel splat, as seen in the call trace, and was resolved by modifying the error path to properly release resources upon failure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share