CVE-2022-50378

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/meson: reorder driver deinit sequence to fix use-after-free bug

Unloading the driver triggers the following KASAN warning:

[ +0.006275] =============================================================

[ +0.000029] BUG: KASAN: use-after-free in __list_del_entry_valid+0xe0/0x1a0

[ +0.000026] Read of size 8 at addr ffff000020c395e0 by task rmmod/2695

[ +0.000019] CPU: 5 PID: 2695 Comm: rmmod Tainted: G C O 5.19.0-rc6-lrmbkasan+ #1

[ +0.000013] Hardware name: Hardkernel ODROID-N2Plus (DT)

[ +0.000008] Call trace:

[ +0.000007] dump_backtrace+0x1ec/0x280

[ +0.000013] show_stack+0x24/0x80

[ +0.000008] dump_stack_lvl+0x98/0xd4

[ +0.000011] print_address_description.constprop.0+0x80/0x520

[ +0.000011] print_report+0x128/0x260

[ +0.000007] kasan_report+0xb8/0xfc

[ +0.000008] __asan_report_load8_noabort+0x3c/0x50

[ +0.000010] __list_del_entry_valid+0xe0/0x1a0

[ +0.000009] drm_atomic_priva

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References