CVE-2022-49047

HIGH

Linux Kernel 5.16-5.17.3 - Use-After-Free in ep93xx Clock Gate Registration

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix UAF in ep93xx_clk_register_gate() arch/arm/mach-ep93xx/clock.c:154:2: warning: Use of memory after it is freed [clang-analyzer-unix.Malloc] arch/arm/mach-ep93xx/clock.c:151:2: note: Taking true branch if (IS_ERR(clk)) ^ arch/arm/mach-ep93xx/clock.c:152:3: note: Memory is released kfree(psc); ^~~~~~~~~~ arch/arm/mach-ep93xx/clock.c:154:2: note: Use of memory after it is freed return &psc->hw; ^ ~~~~~~~~

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/0f12166872da46c6b57ba2f1314bbf310b3bf017

Patch

https://git.kernel.org/stable/c/3b68b08885217abd9c57ff9b3bb3eb173eee02a9

Scores

CVSS v3 7.8

EPSS 0.0023

EPSS Percentile 13.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-416

Status published

Products (9)

linux/Kernel 5.16.0 - 5.17.4linux

Linux/Linux < 5.16

Linux/Linux 5.16

Linux/Linux 5.17.4 - 5.17.*

Linux/Linux 5.18

Linux/Linux 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 - 0f12166872da46c6b57ba2f1314bbf310b3bf017

Linux/Linux 9645ccc7bd7a16cd73c3be9dee70cd702b03be37 - 3b68b08885217abd9c57ff9b3bb3eb173eee02a9

linux/linux_kernel 5.18 rc1 (2 CPE variants)

linux/linux_kernel 5.16 - 5.17.4

Published Feb 26, 2025

Tracked Since Feb 18, 2026