Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Ola Jeppsson

#34360of 56,333
7.8Total CVSS
Vulnerabilities · 1
PT-2023-9450
7.8
2023-01-20
Linux · Linux Kernel · CVE-2022-48872
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use-after-free race condition in the fastrpc component of the Linux kernel. This condition can occur when one thread calls `fastrpc map get()` and another thread calls `fastrpc map lookup()` before the lock is taken in `fastrpc free map()`, potentially allowing access to a map that is about to be deleted. The vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. Technical details include the involvement of functions such as `fastrpc map get()`, `fastrpc map lookup()`, and `fastrpc free map()`, with a warning for `refcount t: addition on 0; use-after-free` and a call trace indicating the sequence of events leading to the issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.