CVE-2022-50642

Linux Kernel 5.9-5.15.86 5.16-6.0.16 6.1-6.1.2 - Use-After-Free in cros_ec_typec Switch Handle Allocation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: zero out stale pointers `cros_typec_get_switch_handles` allocates four pointers when obtaining type-c switch handles. These pointers are all freed if failing to obtain any of them; therefore, pointers in `port` become stale. The stale pointers eventually cause use-after-free or double free in later code paths. Zeroing out all pointer fields after freeing to eliminate these stale pointers.

Scores

EPSS 0.0018
EPSS Percentile 7.6%

Details

Status published
Products (13)
linux/Kernel 5.16.0 - 6.0.16linux
linux/Kernel 5.9.0 - 5.15.86linux
linux/Kernel 6.1.0 - 6.1.2linux
Linux/Linux < 5.9
Linux/Linux 5.15.86 - 5.15.*
Linux/Linux 5.9
Linux/Linux 6.0.16 - 6.0.*
Linux/Linux 6.1.2 - 6.1.*
Linux/Linux 6.2
Linux/Linux f28adb41dab4a2795fd959750df57adffd2bb0be - 0ceadb5a3e45f1b81cf54bd496b40a5e50b6bd40
... and 3 more
Published Dec 09, 2025
Tracked Since Feb 18, 2026