CVE-2022-49385
linux: In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed...
CVE-2022-49385 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49385, released February 26, 2025. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0030
22nd percentile
In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driver_private will be freed. But it has been added to the bus, which caused a UAF. To fix it, we need to delete it from the bus when failed.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| linux · Debian 12.15 (bookworm) | 5.18.5-1 | DEBIAN-CVE-2022-49385 | Feb 26, 2025 |
| linux · Debian 13.5 (trixie) | 5.18.5-1 | DEBIAN-CVE-2022-49385 | Feb 26, 2025 |
| linux · Debian 14 | 5.18.5-1 | DEBIAN-CVE-2022-49385 | Feb 26, 2025 |