Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-50677

ipmi: fix use after free in _ipmi_destroy_user()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.270, 5.4.229, 5.10.163, 5.15.87, 6.0.18, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in _ipmi_destroy_user() The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From f9d405a4bd6090ffbf3bba5e2da6b44c0e013cb3 · fixed in 35ad87bfe330f7ef6a19f772223c63296d643172; From b642ced2cad496c32ae1f62b85fc395391190820 · fixed in d23006f2a56e11a3103de0ca8b843bf7fd7d76fc; From cbb79863fc3175ed5ac506465948b02a893a8235 · fixed in f29d127b372e1b7662397d92341d9f7de198ff99; From cbb79863fc3175ed5ac506465948b02a893a8235 · fixed in bfce073089cb81482521c65061835aaa6d1a6cc0; From cbb79863fc3175ed5ac506465948b02a893a8235 · fixed in f7fde441198a9ecb130c3ccec91ee2131d6998ee; From cbb79863fc3175ed5ac506465948b02a893a8235 · fixed in 1fc9b20a7688000fcf4d7fbaa58e415a3cdda961; From cbb79863fc3175ed5ac506465948b02a893a8235 · fixed in a92ce570c81dc0feaeb12a429b4bc65686d17967; From 4.19.92 · fixed in 4.19.270; From 5.4.7 · fixed in 5.4.229

  • Linux Linux

    5.5

  • KernelLinux

    fixed in 4.19.270; From 4.20.0 · fixed in 5.4.229; From 5.5.0 · fixed in 5.10.163; fixed in 5.15.87; From 5.11.0 · fixed in 6.0.18; From 5.16.0 · fixed in 6.1.4

References 7

git.kernel.org