CVE-2022-49980

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc4-next-20220628-syzkaller

Description A use-after-free bug was found in the Linux kernel, specifically in the usb udc uevent() function. This bug occurs due to a race between uevent callbacks and gadget driver unregistration, which can cause the udc->driver field to be accessed after it has been deallocated. The issue was discovered by the syzbot fuzzer.

Recommendations To prevent the race, ensure that the usb udc uevent() routine holds the udc lock mutex around the racing accesses. For Linux kernel versions prior to 5.19.0-rc4-next-20220628-syzkaller, apply the patch that fixes the use-after-free Read in usb udc uevent().