Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-49385 Details

Description

In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driver_private will be freed. But it has been added to the bus, which caused a UAF. To fix it, we need to delete it from the bus when failed.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/310862e574001a97ad02272bac0fd13f75f42a27 kernel.orgPatch
https://git.kernel.org/stable/c/5389101257828d1913d713d9a40acbe14f5961df kernel.orgPatch
https://git.kernel.org/stable/c/5d709f58c743166fe1c6914b9de0ae8868600d9b kernel.orgPatch
https://git.kernel.org/stable/c/823f24f2e329babd0330200d0b74882516fe57f4 kernel.orgPatch
https://git.kernel.org/stable/c/c059665c84feab46b7173d3a1bf36c2fb7f9df86 kernel.orgPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After FreeCISA-ADP

Affected Products

ProductVersions
linux linux kernel
>= 3.9, < 5.4.198
>= 5.5, < 5.10.122
>= 5.11, < 5.15.47
>= 5.16, < 5.17.15
>= 5.18, < 5.18.4

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-49385
NVD Published Date:
Feb 26, 2025
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2022-49385 Details - Not Deferred