{
  "cveId": "CVE-2022-49842",
  "url": "https://patchblox.com/security/cve/CVE-2022-49842",
  "summary": "CVE-2022-49842 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49842, released May 1, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: core: Fix use-after-free in snd_soc_exit()...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ASoC: core: Fix use-after-free in snd_soc_exit()  KASAN reports a use-after-free:  BUG: KASAN: use-after-free in device_del\u002B0xb5b/0xc60 Read of size 8 at addr ffff888008655050 by task rmmod/387 CPU: 2 PID: 387 Comm: rmmod Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996) Call Trace: \u003CTASK\u003E dump_stack_lvl\u002B0x79/0x9a print_report\u002B0x17f/0x47b kasan_report\u002B0xbb/0xf0 device_del\u002B0xb5b/0xc60 platform_device_del.part.0\u002B0x24/0x200 platform_device_unregister\u002B0x2e/0x40 snd_soc_exit\u002B0xa/0x22 [snd_soc_core] __do_sys_delete_module.constprop.0\u002B0x34f/0x5b0 do_syscall_64\u002B0x3a/0x90 entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd ... \u003C/TASK\u003E  It\u0027s bacause in snd_soc_init(), snd_soc_util_init() is possble to fail, but its ret is ignored, which makes soc_dummy_dev unregistered twice.  snd_soc_init()     snd_soc_util_init()         platform_device_register_simple(soc_dummy_dev)         platform_driver_register() # fail     \tplatform_device_unregister(soc_dummy_dev)     platform_driver_register() # success ... snd_soc_exit()     snd_soc_util_exit()     # soc_dummy_dev will be unregistered for second time  To fix it, handle error and stop snd_soc_init() when util_init() fail. Also clean debugfs when util_init() or driver_register() fail.",
  "published": "2025-05-01T15:16:07Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00222,
  "epssPercentile": 0.12827,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49842",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49842",
      "released": "2025-05-01T15:16:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49842",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49842",
      "released": "2025-05-01T15:16:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49842",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49842",
      "released": "2025-05-01T15:16:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}